medium5.4
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.
Impact
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| OpenStack | OpenStack Ironic | before 39.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.