Login Request a demo
IR
Product
ironic-python-agent
by OpenStack · last CVE Jul 24, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ironic-python-agent to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-43003
7.5
1%
May 1
An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0
Affected: before 10.2.3; 11.0.0 before 11.2.1; 11.3.0 before 11.5.1
CVE-2026-66138
7.2
0%
Jul 24
In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a…
Affected: 11.6.0; 11.3.0 through 11.5.1; 11.0.0 through 11.2.1; 6.0.0 through 10.2.3
CVE-2026-54422
5.5
0%
Jul 24
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it
Affected: 10.2.0 before 10.2.3; 11.0.0 before 11.2.1; 11.3.0 before 11.5.1
Showing 3