Back to CVE List

CVE-2026-54422

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score
5.5 / 10
Vector String
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

Vulnerability Description

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-522
Source
NVD
Vendor
OpenStack
Product
Ironic Python Agent

External References

Discussion (0)

Add Comment

No comments yet. Be the first!