CVE-2026-54423CWE-424

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to…

High · published July 10, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
40.8
In the wild
Unconfirmed
What it is

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00485 · 40.8th percentile
Weakness
CWE-424 · Improper Protection of Alternate Path
Published
2026-07-10T03:10Z
EPSS history
Timeline
  • 10 JUL 03:10Z
    In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to…
    cvelistv5