8.0
Élevée
CVE-2026-43003 An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0
Description
An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ironic-python-agent 11.3 | 11.3.0 → < 11.5.1 | 11.5.1 |
| ironic-python-agent 11.0 | 11.0.0 → < 11.2.1 | 11.2.1 |
| ironic-python-agent 10.2 | premières → < 10.2.3 | 10.2.3 |
| Red Hat OpenShift Container Platform 4 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.22 1785883346 | premières → < 1785883346 | 1785883346 |
| Red Hat OpenShift Container Platform 4.21 1786942282 | premières → < 1786942282 | 1786942282 |
| Red Hat OpenShift Container Platform 4.20 1787735456 | premières → < 1787735456 | 1787735456 |
| Red Hat OpenShift Container Platform 4.19 1787545085 | premières → < 1787545085 | 1787545085 |
| Red Hat OpenShift Container Platform 4.2 1787735456 | premières → < 1787735456 | 1787735456 |