What is the CVSS score of CVE-2026-54422?

CVE-2026-54422 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Ironic Python Agent are affected by CVE-2026-54422?

OpenStack Ironic Python Agent versions 10.2.0-10.2.2, 11.0.0-11.2.0, and 11.3.0-11.5.0 contain a critical credential extraction vulnerability affecting deployments with bootc deploy_interface…. A patch is available.

How to fix or mitigate CVE-2026-54422?

Within 24 hours, identify all OpenStack deployments running vulnerable IPA versions (10.2.0-10.2.2, 11.0.0-11.2.0, 11.3.0-11.5.0) with bootc deploy_interface enabled and immediately audit which operator-level OCI registry credentials are accessible from those systems. Within 7 days, disable bootc deploy_interface if not operationally critical, and rotate all OCI registry pull secrets with documented timestamp; restrict tenant deploy_interface choices to non-bootc alternatives. Within 30 days, monitor Ironic upstream releases for a CVE-2026-54422 patch; upon availability, test the patch in a staging environment and deploy to production.

Ironic Python Agent CVE-2026-54422

EUVD-2026-48475 MEDIUM

Insufficiently Protected Credentials (CWE-522)

2026-07-23

GHSA-7r4g-5584-3hjx

Python Information Disclosure

5.5

CVSS 3.1 · Vendor

Severity by source

Vendor (CNA) PRIMARY

5.5 MEDIUM

AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

vuln.today AI

7.7 HIGH

Tenant deploys via network API with low Ironic privileges (AV:N, AC:L, PR:L); container reads cross-boundary operator secret (S:C, C:H); no integrity or availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Primary rating from Vendor (CNA).

CVSS VectorVendor

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jul 24, 2026 - 06:02 EUVD

CVSS changed

Jul 24, 2026 - 05:22 NVD

5.5 (MEDIUM)

Analysis Generated

Jul 23, 2026 - 22:22 vuln.today

CVE Published

Jul 23, 2026 - 19:25 oss-security

CRITICAL

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

Articles & Coverage 2

News 3 New Python Vulnerabilities - 1 Critical, 2 High Severity Jul 24, 2026 News Critical Credential Theft via PID Namespace Escape in OpenStack Ironic Python Agent - CVE-2026-54422 Jul 23, 2026

AnalysisAI

Credential extraction in OpenStack Ironic Python Agent (IPA) allows a tenant with bootc deploy_interface access to steal operator-level OCI registry pull secrets by exploiting a Linux PID namespace escape. Affected deployments running IPA >=10.2.0 <10.2.3, >=11.0.0 <11.2.1, or >=11.3.0 <11.5.1 are at risk when the bootc deploy_interface is enabled and operator-side registry credentials are configured. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate to Ironic as tenant

Delivery

Submit bootc deployment with malicious OCI image

Exploit

IPA writes operator pull secret to host auth.json

Execution

Container reads /proc/1/root/root/.config/containers/auth.json via --pid=host

Persist

Exfiltrate operator OCI registry credential

Impact

Access private OCI registry with stolen secret

Access

Authenticate to Ironic as tenant

Delivery

Submit bootc deployment with malicious OCI image

Exploit

IPA writes operator pull secret to host auth.json

Execution

Container reads /proc/1/root/root/.config/containers/auth.json via --pid=host

Persist

Exfiltrate operator OCI registry credential

Impact

Access private OCI registry with stolen secret

Vulnerability AssessmentAI

Exploitation	The bootc deploy_interface must be enabled on Ironic conductors and accessible to the attacking tenant. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Real-world risk is meaningful for any OpenStack Ironic deployment that both exposes the bootc deploy_interface to tenants and relies on operator-side OCI registry credentials (driver_info.image_pull_secret, [deploy] image_server_user/password, or [oci] authentication_config). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	A tenant with Ironic access submits a bare metal deployment using a malicious bootc OCI image they control. IPA writes the operator-level OCI pull secret to /root/.config/containers/auth.json on the provisioning host, then launches the tenant image with --pid=host and --privileged. …
Remediation	The primary fix is to apply upstream patches published via OpenDev review: https://review.opendev.org/998479 (2026.2/hibiscus), https://review.opendev.org/998481 (2026.1/gazpacho), https://review.opendev.org/998484 (2025.2/flamingo), https://review.opendev.org/998485 (2025.1/epoxy), https://review.opendev.org/998480 (bugfix/11.6), https://review.opendev.org/998493 (bugfix/11.4), and https://review.opendev.org/998494 (bugfix/11.3). … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all OpenStack deployments running vulnerable IPA versions (10.2.0-10.2.2, 11.0.0-11.2.0, 11.3.0-11.5.0) with bootc deploy_interface enabled and immediately audit which operator-level OCI registry credentials are accessible from those systems. …

Threat intelligence, references, and detailed analysis are available after sign-in.