Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-43003

Опубликовано: 01 мая 2026
Источник: nvd
CVSS3: 8
CVSS3: 7.5
CVSS3: 8.5
EPSS Низкий

Описание

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*
Версия от 1.0.0 (включая) до 11.5.0 (включая)

EPSS

Процентиль: 54%
0.00837
Низкий

8 High

CVSS3

7.5 High

CVSS3

8.5 High

CVSS3

Дефекты

CWE-829
CWE-78

Связанные уязвимости

CVSS3: 8
ubuntu
3 месяца назад

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

CVSS3: 8.5
redhat
3 месяца назад

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

CVSS3: 8
debian
3 месяца назад

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through ...

CVSS3: 8
github
3 месяца назад

OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere

EPSS

Процентиль: 54%
0.00837
Низкий

8 High

CVSS3

7.5 High

CVSS3

8.5 High

CVSS3

Дефекты

CWE-829
CWE-78