VULNERABILITY INTELLIGENCE
CVE-2026-44916
CVSS score3 LOW
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-05-08
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
Description
In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.
Weakness classification
- cve@mitre.org: CWE-1336
Primary references
- cve@mitre.org — Issue Tracking, Mitigation, Third Party Advisory
- cve@mitre.org — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Third Party Advisory