high8.2
CVE-2026-54423
In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to…
Impact
In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| OpenStack | OpenStack Ironic | before 37.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.