CVE-2026-66138

HIGH

7.2

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2026-07-24

Last Modified2026-07-25

Data SourcesNVD

Vulnerability Description

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntp_server is passed to a shell.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://bugs.launchpad.net/ironic-python-agent/+bug/2160050

🔗 https://security.openstack.org/ossa/OSSA-2026-027.html

🔗 http://www.openwall.com/lists/oss-security/2026/07/24/26

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

関連する脆弱性情報