CVE-2026-46447
2 advisories.
PyPI/ironic CVE-2026-46447: medium 5.8
OpenStack Ironic allows Boot Script Injection
Action: Upgrade ironic to 26.1.7 or later.
pip install ironic==26.1.7pip install ironic==29.0.6pip install ironic==32.0.2pip install ironic==35.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 17.0.0 | 26.1.7 | - |
| 27.0.0 | 29.0.6 | - |
| 30.0.0 | 32.0.2 | - |
| 33.0.0 | 35.0.2 | - |
Fixed versions
| 26.1.7 | 29.0.6 | 32.0.2 | 35.0.2 |
Sources
- osv: GHSA-jrh2-f5jc-xpgr
- https://nvd.nist.gov/vuln/detail/CVE-2026-46447
- https://bugs.launchpad.net/ironic/+bug/2150624
- https://github.com/openstack/ironic
- https://security.openstack.org/ossa/OSSA-2026-017.html
- http://www.openwall.com/lists/oss-security/2026/06/03/11
- http://www.openwall.com/lists/oss-security/2026/06/15/9
CVE-2026-46447 · published · modified · JSON
PyPI/ironic CVE-2026-46447: medium 5.8
OpenStack Ironic allows Boot Script Injection
Action: Upgrade ironic to 26.1.7 or later.
pip install ironic==26.1.7pip install ironic==29.0.6pip install ironic==32.0.2pip install ironic==35.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 17.0.0 | 26.1.7 | - |
| 27.0.0 | 29.0.6 | - |
| 30.0.0 | 32.0.2 | - |
| 33.0.0 | 35.0.2 | - |
Fixed versions
| 26.1.7 | 29.0.6 | 32.0.2 | 35.0.2 |
Sources
- osv: PYSEC-2026-3471
- https://nvd.nist.gov/vuln/detail/CVE-2026-46447
- https://bugs.launchpad.net/ironic/+bug/2150624
- https://github.com/openstack/ironic
- https://security.openstack.org/ossa/OSSA-2026-017.html
- http://www.openwall.com/lists/oss-security/2026/06/03/11
- http://www.openwall.com/lists/oss-security/2026/06/15/9
- https://pypi.org/project/ironic
- https://github.com/advisories/GHSA-jrh2-f5jc-xpgr
CVE-2026-46447 · published · modified · JSON