Deployment Interface Issue in OpenStack Ironic by OpenStack
CVE-2026-74250

6.3MEDIUM

Key Information:

Vendor

Openstack
Status
Ironic
Vendor
CVE Published:
14 August 2026

What is CVE-2026-74250?

A design flaw in the OpenStack Ironic deployment process has been identified, where the autodetect deploy interface may not perform necessary cleaning actions immediately after enrollment or when switching to this interface. This malfunction could lead to inconsistencies in the system and requires users to apply the recommended versions to ensure seamless operations.

Affected Version(s)

Ironic 32.0.0 < 35.0.2

Ironic 36.0.0 < 38.0.1

References

https://bugs.launchpad.net/ossa/+bug/2163017

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.