Openstack Ironic Python Agent vulnerabilities

1 vulnerability

Known vulnerabilities in Openstack Ironic Python Agent, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8CVE-2026-43003debianironic+5
EPSS score
1.13%
An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.