An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.5 · openstackNVD modified 2026-10-26 22:10
Affected (CPE criteria) 1
cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*
References 10
- https://bugs.launchpad.net/ironic-python-agent/+bug/2148310 Issue Tracking
- https://github.com/openstack/ironic-python-agent/blob/236b33abffe6688afc39c21e351cc3889b3db2dd/ironic_python_agent/efi_utils.py#L134-L139 Product
- http://www.openwall.com/lists/oss-security/2026/06/16/11
- https://access.redhat.com/errata/RHSA-2026:51038
- https://access.redhat.com/errata/RHSA-2026:57801
- https://access.redhat.com/errata/RHSA-2026:60446
- https://access.redhat.com/errata/RHSA-2026:60454
- https://access.redhat.com/security/cve/CVE-2026-43003
- https://bugzilla.redhat.com/show_bug.cgi?id=2464306
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43003.json