CVE-2026-48681

Description

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.

Affected Platforms

Weakness Type

CWE-23

References

• https://bugs.launchpad.net/ironic/+bug/2148333
• https://www.openwall.com/lists/oss-security/2026/06/03/12
• http://www.openwall.com/lists/oss-security/2026/06/03/12