CVE-2026-43003High· 8.0▾ TwilightAn issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a mal…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.8%
Last analysed / modified upstream
8 → 8.5
8.5 → 8
8 → 8.5
8.5 → 8
8 → 8.5
8.5 → 8
8 → 8.5
8.5 → 8
8 → 8.5
8.5 → 8
8 → 8.5
8.5 → 8
0.8% → 1.1%
An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.
ironic_python_agent >= 1.0.0, <= 11.5.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
ironic-python-agent >= 1.0.0, < 11.6.0Patched in:
ironic-python-agent 11.6.0Source: https://osv.dev/vulnerability/GHSA-rmxr-45gj-889w
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-55748Medium· 6.0OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters
CVE-2026-49017Medium· 6.5In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body
CVE-2017-7200Medium· 5.8An SSRF issue was discovered in OpenStack Glance before Newton
CVE-2026-97147High· 7.2In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it
CVE-2026-93860High· 7.1In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement
CVE-2026-97149Medium· 5.3In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests