Skip to content
Fencer Vulns
medium 5.5

CVE-2026-44918 json

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.

published 2026-07-10 4 mo ago modified 2026-10-25 14 d ago also EUVD-2026-42777

cvss
5.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 35%
public exploits
0
none known

Summary

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.

Patch / fix

  • OpenStack Ironic 29.0.6, 32.0.2, 35.0.2, 37.0.1
  • ironic Debian 13 1:29.0.5-0+deb13u3
  • ironic Debian 14 1:35.0.1-8

debian advisories DEBIAN-CVE-2026-44918

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-44918 updated cvss 8.7

openstack-ironic: Prevent rehoming resources to nodes with different owner

  • Red Hat OpenShift Container Platform 5 openstack-ironic Red Hat OpenStack Platform 17.1 openstack-ironic, openstack-ironic-api, openstack-ironic-common, openstack-ironic-conductor Red Hat OpenStack Platform 18.0 openstack-ironic
    affected: workaround, no fix available
  • Red Hat Ironic content for Red Hat OpenShift Container Platform 4.12 openstack-ironic 21.0.1-0.20261012095526.c95b83b.el9, openstack-ironic-api 21.0.1-0.20261012095526.c95b83b.el9, python3-ironic-tests 21.0.1-0.20261012095526.c95b83b.el9, openstack-ironic-common 21.0.1-0.20261012095526.c95b83b.el9, openstack-ironic-conductor 21.0.1-0.20261012095526.c95b83b.el9, openstack-ironic-dnsmasq-tftp-server 21.0.1-0.20261012095526.c95b83b.el9
    fixed: vendor fix RHSA-2026:90271
  • Red Hat OpenShift Container Platform 4.14 openshift4/ose-ironic-rhel9 1790602647
    fixed: vendor fix RHSA-2026:73869
  • Red Hat OpenShift Container Platform 4.15 openshift4/ose-ironic-rhel9 1791583819
    fixed: vendor fix RHSA-2026:82813
  • Red Hat OpenShift Container Platform 4.16 openshift4/ose-ironic-rhel9 1789449514
    fixed: vendor fix RHSA-2026:67936
  • Red Hat OpenShift Container Platform 4.17 openshift4/ose-ironic-rhel9 1789937634
    fixed: vendor fix RHSA-2026:70587
  • Red Hat OpenShift Container Platform 4.18 openshift4/ose-ironic-rhel9 1788575555
    fixed: vendor fix RHSA-2026:65852
  • Red Hat OpenShift Container Platform 4.19 openshift4/ose-ironic-rhel9 1787046085
    fixed: vendor fix RHSA-2026:57408
show 4 more
  • Red Hat OpenShift Container Platform 4.20 openshift4/ose-ironic-rhel9 1786494073
    fixed: vendor fix RHSA-2026:54583
  • Red Hat OpenShift Container Platform 4.21 openshift4/ose-ironic-rhel9 1786573036
    fixed: vendor fix RHSA-2026:54602
  • Red Hat OpenShift Container Platform 4.22 openshift4/ose-ironic-rhel9 1785883416
    fixed: vendor fix RHSA-2026:51038
  • Red Hat OpenShift Container Platform 4.12 cri-tools 1.25.0-8.el9, cri-tools 1.25.0-9.el8, conmon 2.1.2-9.rhaos4.12.el8, conmon 2.1.2-10.rhaos4.12.el9, haproxy 2.2.24-6.rhaos4.12.el8, ignition 2.14.0-9.rhaos4.12.el9, +22 more Red Hat OpenShift Container Platform 4.14 openshift4/ose-cli 1790603423, openshift4/ose-pod 1790605233, openshift4/ose-tests 1790606532, openshift4/ose-console 1790606051, openshift4/ose-coredns 1790603521, openshift4/ose-deployer 1790606152, +189 more Red Hat OpenShift Container Platform 4.15 openshift4/ose-cli 1791878476, openshift4/ose-tests 1791889482, openshift4/ose-console 1791836468, openshift4/ose-deployer 1791888334, openshift4/ose-installer 1791889788, openshift4/ose-pod-rhel9 1791639781, +184 more Red Hat OpenShift Container Platform 4.16 openshift4/ose-cli-rhel9 1789361923, openshift4/ose-pod-rhel9 1789370561, openshift4/ose-sdn-rhel9 1789376367, openshift4/ose-etcd-rhel9 1789369183, openshift4/ose-tests-rhel9 1789368515, openshift4/ose-tools-rhel9 1789366012, +182 more Red Hat OpenShift Container Platform 4.17 openshift4/frr-rhel9 1789938330, openshift4/ose-cli-rhel9 1789937904, openshift4/ose-pod-rhel9 1789937463, openshift4/ose-etcd-rhel9 1789937632, openshift4/ose-tests-rhel9 1790075131, openshift4/ose-tools-rhel9 1790073665, +180 more Red Hat OpenShift Container Platform 4.18 openshift4/frr-rhel9 1788576352, openshift4/ose-cli-rhel9 1788576309, openshift4/ose-pod-rhel9 1788575535, openshift4/ose-etcd-rhel9 1788576053, openshift4/ose-tests-rhel9 1788579480, openshift4/ose-tools-rhel9 1788576163, +180 more
    +6 more products
    Red Hat OpenShift Container Platform 4.19 openshift4/frr-rhel9 1786760573, openshift4/ose-cli-rhel9 1787046152, openshift4/ose-pod-rhel9 1786802866, openshift4/ose-etcd-rhel9 1786767009, openshift4/ose-tests-rhel9 1787106695, openshift4/ose-tools-rhel9 1787105251, +182 more Red Hat OpenShift Container Platform 4.20 openshift4/frr-rhel9 1786493981, openshift4/ose-cli-rhel9 1786494900, openshift4/ose-pod-rhel9 1786498817, openshift4/ose-etcd-rhel9 1786494149, openshift4/ose-tests-rhel9 1786545242, openshift4/ose-tools-rhel9 1786543651, +183 more Red Hat OpenShift Container Platform 4.21 openshift4/frr-rhel9 1786497121, openshift4/ose-cli-rhel9 1786496647, openshift4/ose-pod-rhel9 1786502473, openshift4/ose-etcd-rhel9 1786497722, openshift4/ose-tests-rhel9 1786526472, openshift4/ose-tools-rhel9 1786524417, +180 more Red Hat OpenShift Container Platform 4.22 openshift4/frr-rhel9 1785883609, openshift4/ose-cli-rhel9 1785883865, openshift4/ose-pod-rhel9 1785885460, openshift4/ose-etcd-rhel9 1785884715, openshift4/ose-tests-rhel9 1785886018, openshift4/ose-tools-rhel9 1785883357, +182 more Red Hat OpenStack Platform 13 (Queens) openstack-ironic-api, openstack-ironic-common, openstack-ironic-conductor Red Hat OpenStack Platform 16.2 openstack-ironic, openstack-ironic-api, openstack-ironic-common, openstack-ironic-conductor
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
4 mo ago

Exploit prediction

0.41% chance of exploitation in the next 30 days, higher than 35% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Affected products

  • OpenStack Ironic

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.