medium5.9
CVE-2026-48681
OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.
Impact
OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | ironic | >= 17.0.0, < 26.1.7 | 26.1.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Ironic | from 17.0.0 before 26.1.7 from 27.0.0 before 29.0.6 from 30.0.0 before 32.0.2 from 33.0.0 before 35.0.2 |