CVE-2026-48681

2 advisories.

PyPI/ironic CVE-2026-48681: medium 5.9, EPSS 0.85%

OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image

Action: Upgrade ironic to 26.1.7 or later.

pip install ironic==26.1.7

pip install ironic==29.0.6

pip install ironic==32.0.2

pip install ironic==35.0.2

Affected

introduced	fixed	last affected
17.0.0	26.1.7	-
27.0.0	29.0.6	-
30.0.0	32.0.2	-
33.0.0	35.0.2	-

Fixed versions

26.1.7

29.0.6

32.0.2

35.0.2

Sources

CVE-2026-48681 · published 2026-06-04T06:30:25Z · modified 2026-07-23T15:11:43.749298597Z · JSON

PyPI/ironic CVE-2026-48681: medium 5.9, EPSS 0.85%

OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image

Action: Upgrade ironic to 26.1.7 or later.

pip install ironic==26.1.7

pip install ironic==29.0.6

pip install ironic==32.0.2

pip install ironic==35.0.2

Affected

introduced	fixed	last affected
17.0.0	26.1.7	-
27.0.0	29.0.6	-
30.0.0	32.0.2	-
33.0.0	35.0.2	-

Fixed versions

26.1.7

29.0.6

32.0.2

35.0.2

Sources

CVE-2026-48681 · published 2026-07-23T11:41:38.059797Z · modified 2026-07-23T15:00:14.001532060Z · JSON