7.2
High
CVE-2026-66138 In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary…
Description
In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntp_server is passed to a shell.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ironic Python Agent | 11.6.0 | No fix stated |
| Ironic Python Agent 11.3 | 11.3.0 → 11.5.1 | No fix stated |
| Ironic Python Agent 11.0 | 11.0.0 → 11.2.1 | No fix stated |
| Ironic Python Agent 6.0 | 6.0.0 → 10.2.3 | No fix stated |