CVE-2026-54423

Summary

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.

Affected Software

VendorProductVersion RangeStatus
OpenStackIronic22.1.0 < 29.0.6affected
OpenStackIronic30.0.0 < 32.0.2affected
OpenStackIronic32.0.0 < 35.0.2affected
OpenStackIronic36.0.0 < 37.0.1affected

Weaknesses

  • CWE-424: CWE-424 Improper Protection of Alternate Path

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References