OpenStack Ironic API Vulnerability Allows Service Disruption by Malicious Users

CVE-2026-50589

What is CVE-2026-50589?

In versions of OpenStack Ironic before 37.0.0, an unauthenticated attacker can exploit a weakness in the API by submitting a specially crafted JSON string. This malicious input can lead to a crash of the service, thereby disrupting normal operations. It underscores the importance of securing API endpoints against unauthorized access and validating input data to prevent service denial.

References