Log in Start free

Vulnerability · Published May 1, 2026 · Assigned by mitre

CVE-2026-43003

High 8.0

In plain English

A high-severity OS command injection in ironic-python-agent from OpenStack. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.0High
Exploit odds (30 days)1.0%top 37.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12ironic1:21.4.4-0+deb12u2DEBIAN-CVE-2026-43003
Debian:13ironic1:29.0.5-0+deb13u3DEBIAN-CVE-2026-43003
Debian:14ironic1:35.0.1-7DEBIAN-CVE-2026-43003
Debian:13ironic-python-agentno fix listedDEBIAN-CVE-2026-43003
Debian:14ironic-python-agent11.5.0-3DEBIAN-CVE-2026-43003
PyPIironic-python-agent11.6.0GHSA-rmxr-45gj-889w
PyPIironic-python-agent11.6.0PYSEC-2026-205
Ubuntu:24.04:LTSironic-python-agentno fix listedUBUNTU-CVE-2026-43003
Ubuntu:25.10ironic-python-agentno fix listedUBUNTU-CVE-2026-43003
Ubuntu:26.04:LTSironic-python-agentno fix listedUBUNTU-CVE-2026-43003
Ubuntu:26.10ironic-python-agentno fix listedUBUNTU-CVE-2026-43003

Affected products (as reported)

VendorProductVersions
OpenStack ironic-python-agent 0 – before 10.2.311.0.0 – before 11.2.111.3.0 – before 11.5.1

Weakness: CWE-829, CWE-78 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References