medium5.0
CVE-2026-89419
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using t…
Impact
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific maintenance endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| OpenStack | OpenStack Ironic | before 39.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.