Feed/CVE-2026-43003
CVE-2026-43003HIGHCVSS 8.0

OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere

Published May 1, 2026·Updated Aug 11, 2026

NVD Description

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

Affected Packages (1)

ironic-python-agentPYPI
From 1.0.0
Fixed in = 11.5.0

CVSS Vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free