GitHub Advisoryadvisory · PyPI

GHSA-wqpv-c3pp-3m58 OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

MEDIUM Published 2026-04-28 Modified 2026-07-08 Official page ↗

Aliases: CVE-2026-42510
Ecosystem: PyPI
Packages: ironic
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-829
Reviewed: 2026-05-06

Affected packages

• PyPI ironic: < 35.0.1 → fixed in 35.0.1

Description

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

Related

Alias · CVE (1)

CVE-2026-42510 OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface. vulnerability

Weakness · CWE (1)

CWE-829 Inclusion of Functionality from Untrusted Control Sphere weakness

References