CVE-2026-44916

Published: May 8, 2026Modified: Jun 18, 2026

3.0

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

Exploitability: 1.3 / Impact: 1.4

Source: MITRE (Secondary)

Description

In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.

Affected (4)

Products: Openstack: Ironic

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Openstack Ironic	From 17.0.0 to 26.1.7
Openstack Ironic	From 27.0.0 to 29.0.6
Openstack Ironic	From 30.0.0 to 32.0.2
Openstack Ironic	From 33.0.0 to 35.0.2

Related CWEs

Improper Neutralization of Special Elements Used in a Template Engine

The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.

References (3)

https://bugs.launchpad.net/ironic/+bug/2148307

Source: cve@mitre.org

Issue TrackingMitigationThird Party Advisory

https://security.openstack.org/ossa/OSSA-2026-012.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.openwall.com/lists/oss-security/2026/05/11/7

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

Timeline

No history available yet.