{"action":"Upgrade ironic-python-agent to 11.6.0 or later.","affected":[{"fixed":"11.6.0","introduced":"1.0.0"}],"component":"ironic-python-agent","cve_ids":["CVE-2026-43003"],"ecosystem":"PyPI","epss":0.00983,"exploited":false,"fixed_versions":["11.6.0"],"ghsa_id":"GHSA-rmxr-45gj-889w","id":"tcs_01M5KFYB9AGT4JXJCKHY2AB5VN","modified_at":"2026-09-02T15:45:19.865952682Z","published_at":"2026-05-01T09:30:25Z","references":["https://osv.dev/vulnerability/GHSA-rmxr-45gj-889w","https://nvd.nist.gov/vuln/detail/CVE-2026-43003","https://access.redhat.com/errata/RHSA-2026:51038","https://access.redhat.com/errata/RHSA-2026:57801","https://access.redhat.com/errata/RHSA-2026:60446","https://access.redhat.com/errata/RHSA-2026:60454","https://access.redhat.com/security/cve/CVE-2026-43003","https://bugs.launchpad.net/ironic-python-agent/+bug/2148310","https://bugzilla.redhat.com/show_bug.cgi?id=2464306","https://github.com/openstack/ironic-python-agent","https://github.com/openstack/ironic-python-agent/blob/236b33abffe6688afc39c21e351cc3889b3db2dd/ironic_python_agent/efi_utils.py#L134-L139","https://github.com/pypa/advisory-database/tree/main/vulns/ironic-python-agent/PYSEC-2026-205.yaml","https://opendev.org/openstack/ironic-python-agent/commit/6cd463a657edcddf7b79416ac69bdef5b6f30099","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43003.json","http://www.openwall.com/lists/oss-security/2026/06/16/11"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-rmxr-45gj-889w","url":"https://osv.dev/vulnerability/GHSA-rmxr-45gj-889w"}],"summary":"OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere"}