EUVD-2026-34181
GHSA-jrh2-f5jc-xpgr
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain low-privilege Ironic API credentials
-
DeliverySubmit crafted node/deploy parameters
-
ExploitMalicious content embedded in generated boot script
-
ExecutionTarget node initiates Ironic-driven boot
-
PersistInjected directives execute in boot environment
-
ImpactIntegrity of provisioned bare-metal host compromised
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Incorrect resource transfer between spheres
|
| Exploitation Conditions | Exploitation requires an account with at least low-privilege access to the Ironic API (CVSS PR:L) and network reachability to that API, which in typical OpenStack deployments is the management/provisioning network rather than the public internet. The attacker must be able to submit input that flows into Ironic's boot-script generation path (e.g., node properties, driver_info, or deploy parameters), and the impact materializes only when a target bare-metal node actually executes an Ironic-driven boot/provision cycle. No user interaction is required (UI:N), and confidentiality and availability are not impacted (C:N/A:N), limiting the realistic outcome to integrity tampering of provisioned nodes rather than data theft or service disruption. |
| Impact | Signals are mixed but converge on a moderate, not urgent, priority. CVSS 7.7 is driven mainly by the scope change and high integrity impact (S:C/I:H) with PR:L, indicating an authenticated but low-privilege actor can affect components beyond Ironic itself - namely the bare-metal node being provisioned. Counterweights: EPSS is 0.03% (7th percentile), CISA SSVC scores Exploitation as 'none' and Automatable as 'no' with only partial technical impact, and there is no KEV listing and no public exploit identified at time of analysis. The CVSS AV:N is consistent with API-network reachability rather than internet-wide exposure, since Ironic is typically deployed on management/provisioning networks; defenders should verify their Ironic API is not directly internet-exposed before treating this as network-reachable in practice. |
| Exploit ScenarioDerived | An authenticated user with low-privilege access to the Ironic API (or a compromised tenant in a multi-tenant bare-metal cloud) submits crafted node attributes or deploy parameters that are incorporated into the boot script Ironic generates. When the target bare-metal node next boots via Ironic's provisioning workflow, the injected directives execute in the boot environment, altering the integrity of the provisioned host. No public POC is referenced in the supplied data. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Jun 15, 2026
Boot script injection in OpenStack Ironic versions up to and including 35.0.x allows authenticated tenants to influence boot scripts processed by the bare-metal provisioning service, with integrity impact extending across a CVSS scope change to the provisioned hardware. Confirmed by upstream advisory OSSA-2026-017 and an Ubuntu USN, with no public exploit identified at time of analysis and an EPSS of 0.03% indicating no observed exploitation activity.
Earlier versions of this analysis (1)
Script injection in OpenStack Ironic's bare metal provisioning service allows an attacker with Ironic API access to inject arbitrary commands via kernel command line parameter overrides supplied during node boot. Affected are active bugfix branches 33.0 and 34.0 (patches available), while end-of-life releases 2023.2 (bobcat) and 2024.2 (dalmation) will receive no patches, leaving operators on those branches with unmitigated exposure. No CVSS score, CISA KEV designation, or public exploit code has been identified at time of analysis; exploitation is constrained by the requirement for privileged Ironic API access, reducing but not eliminating the threat surface in multi-tenant cloud environments.
RemediationAI
Patch available per vendor advisory: apply the Ironic update referenced in OSSA-2026-017 (https://security.openstack.org/ossa/OSSA-2026-017.html) and, on Ubuntu, install the packages from USN-8421-1 (https://ubuntu.com/security/notices/USN-8421-1); exact fix versions are not enumerated in the supplied intelligence, so consult the OSSA stable-branch backport list before deploying. Until patched, compensating controls include restricting Ironic API access to trusted operators only (tighten Keystone roles so tenants cannot reach node-management endpoints), isolating the provisioning network so untrusted nodes cannot inject content consumed during boot, and reviewing any custom deploy templates or driver_info fields that flow into boot scripts - the trade-off is reduced self-service provisioning for tenants and additional operational friction when onboarding new hardware.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in pypi
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Ironic is the OpenStack bare-metal provisioning service that orchestrates iPXE/PXE boot, image deployment, and lifecycle management of physical nodes. CWE-669 (Incorrect Resource Transfer Between Spheres) here manifests as content originating from a less-trusted sphere (tenant-controlled input or node-supplied data) being incorporated into the boot script that Ironic hands to a bare-metal node, crossing the trust boundary between the API/control plane and the firmware/boot environment of the physical host. The affected CPE is openstack:ironic across all versions through the 35.0.x branch, and the vulnerability lives in the path where Ironic constructs the boot configuration delivered over the provisioning network.
Know when Openstack gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Ironic API is network-reachable and requires a low-privilege tenant account (AV:N/AC:L/PR:L); injected boot script crosses to the provisioned node (S:C) tampering integrity only, with no data disclosure or DoS.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5Description PRE-NVD
Executive ViewAI
OpenStack Ironic (bare-metal provisioning service) versions through 35.0.x contain a boot script injection vulnerability that allows authenticated tenants to modify boot configurations, with integrity impact extending to the provisioned hardware itself. Organizations operating Ironic-based infrastructure face risk of unauthorized hardware configuration changes at scale. While no active exploitation is observed, the infrastructure-layer attack vector and tenant-triggered nature require urgent remediation to maintain hardware integrity controls.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Code injection occurs when an application accepts user input and passes it directly into a language interpreter or evaluator without proper sanitization.
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users w
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10,
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an int
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remot
Code injection in OpenStack Vitrage query parser allows authenticated users to execute arbitrary Python code through cra
Exploit-DB