8.0
High
CVE-2026-43003 An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0
Description
An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ironic-python-agent 11.3 | 11.3.0 → < 11.5.1 | 11.5.1 |
| ironic-python-agent 11.0 | 11.0.0 → < 11.2.1 | 11.2.1 |
| ironic-python-agent 10.2 | earliest → < 10.2.3 | 10.2.3 |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift Container Platform 4.22 1785883346 | earliest → < 1785883346 | 1785883346 |
| Red Hat OpenShift Container Platform 4.21 1786942282 | earliest → < 1786942282 | 1786942282 |
| Red Hat OpenShift Container Platform 4.20 1787735456 | earliest → < 1787735456 | 1787735456 |
| Red Hat OpenShift Container Platform 4.19 1787545085 | earliest → < 1787545085 | 1787545085 |
| Red Hat OpenShift Container Platform 4.2 1787735456 | earliest → < 1787735456 | 1787735456 |
References
- bugs.launchpad.net bugs.launchpad.net
- github.com github.com
Timeline
- Published
- Last modified