5.5
Medium
CVE-2026-54422 In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent,…
Description
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ironic Python Agent 11.3 | 11.3.0 → < 11.5.1 | 11.5.1 |
| Ironic Python Agent 11.0 | 11.0.0 → < 11.2.1 | 11.2.1 |
| Ironic Python Agent 10.2 | 10.2.0 → < 10.2.3 | 10.2.3 |