Description (CNA)
An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenStack / ironic-python-agent | affected 0 before 10.2.3; affected 11.0.0 before 11.2.1; affected 11.3.0 before 11.5.1 |
CWE
CWE-829
References
- https://bugs.launchpad.net/ironic-python-agent/+bug/2148310
- https://github.com/openstack/ironic-python-agent/blob/236b33abffe6688afc39c21e351cc3889b3db2dd/ironic_python_agent/efi_utils.py#L134-L139
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
A flaw was found in OpenStack ironic-python-agent (IPA). The Ironic Python Agent sometimes executes the grub-install command from within a chroot environment of a deployed partition image. This allows an attacker, by providing a malicious image, to achieve arbitrary code execution within the system.
- https://access.redhat.com/security/cve/CVE-2026-43003
- https://bugzilla.redhat.com/show_bug.cgi?id=2464306
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43003.json
- https://access.redhat.com/errata/RHSA-2026:60454
- https://access.redhat.com/errata/RHSA-2026:60446
- https://access.redhat.com/errata/RHSA-2026:57801
- https://access.redhat.com/errata/RHSA-2026:51038