CVE-2026-89419

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...

CVE-2026-89419

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...

EUVD-2026-108571

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...

CVE-2026-89419

OpenStack Ironic versions before 39.0.1 are vulnerable to a missing authorization check in the node PATCH API . An authenticated lessee member can bypass the stricter set_maintenance policy by sending a PATCH request to /v1/nodes/{ident} with a maintenance field. Because the request is processed ...

CVE-2026-115638

OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...

EUVD-2026-108570

OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...

CVE-2026-115638

OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...

CVE-2026-115638

OpenStack Ironic versions through 39.0.1 are vulnerable to a denial of service (DoS) attack. The root cause is the improper handling of highly compressed data (CWE-409), specifically allowing a gzip bomb via a configdrive that expands into an excessive amount of uncompressed data. No specific rem...

CVE-2026-115638

OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...

CVE-2026-115638

OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...

OpenStack Ironic resource management error vulnerability

Versions 30.0.0 through 32.1.1, 33.0.0 through 35.1.1, and 36.0.0 through 39.0.1 of OpenStack Ironic contain a resource management error vulnerability. This vulnerability arises because configdrive can lead to the inclusion of large amounts of uncompressed data i.e., gzip bombs, potentially...

Vulnerability related to OpenStack Ironic software supply chain issues

Versions 18.1.0 through 29.1.1, 30.0.0 through 32.1.1, 33.0.0 through 35.1.1, and 36.0.0 through 39.0.1 of OpenStack Ironic contain a vulnerability related to the software supply chain. This vulnerability arises because the vendorpassthru functionality permits operations on the BMC Redfish servic...

PT-2026-121748

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor passthru, e.g., to delete accounts from the BMC's Redfish service...

Linux Distros Unpatched Vulnerability : CVE-2026-115638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...

PT-2026-121742

OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...

CVE-2026-89419

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...

CVE-2026-90458

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...

PT-2026-121747

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...

OpenStack Ironic permission and access control issues vulnerability

Vulnerabilities related to permission and access control exist in OpenStack Ironic versions from 17.0.0 up to and including 29.1.1, from 30.0.0 up to and including 32.1.1, from 33.0.0 up to and including 35.1.1, and from 36.0.0 up to and including 39.0.1. These vulnerabilities arise because users...

CVE-2026-89419

A flaw was found in OpenStack Ironic. A missing authorization check in the node PATCH API allows an authenticated lessee member to change the maintenance state of a bare metal node, an operation that should be restricted to lessee managers and administrators. By sending a PATCH request to...