CVE-2026-54423

Published: Jul 10, 2026Modified: Jul 10, 2026Deferred

8.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H

Exploitability: 2.3 / Impact: 5.3

Source: MITRE (Secondary)

Description

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.

Related CWEs

CWE-424

Improper Protection of Alternate Path

The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.

References (3)

https://bugs.launchpad.net/ironic/+bug/2150458

Source: cve@mitre.org

https://security.openstack.org/ossa/OSSA-2026-025.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2026/07/08/3

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.