← Database

CVE-2026-44917

MEDIUM CVSS: 4.9 Published: 2026-06-04 Modified: 2026-07-22

Description

OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.

Affected Platforms

Openstack Ironic

Weakness Type

CWE-669

References