CVE-2026-44917: Incorrect Resource Transfer Between Spheres

OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxetemplate...