← Database

CVE-2026-89419

MEDIUM CVSS: 5.0 Published: 2026-10-23 Modified: 2026-10-23

Description

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific maintenance endpoint.

Affected Platforms

Unknown

Weakness Type

CWE-424

References