CVE-2026-42510

MEDIUM6.6EPSS 0.03%

OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

Published: 4/28/2026Modified: 5/23/2026

Description

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

Affected packages (2)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM6.6CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

References (5)