CVE-2026-42510 Details
Description
OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.
A command injection vulnerability has been identified in OpenStack Ironic versions through 25.0.0. This issue arises when the IPMI console interface is enabled, allowing users to execute arbitrary commands by injecting shell metacharacters into specific fields. The vulnerability exploits the 'driver_info' parameter, which is passed to the 'ipmitool' command without proper sanitization, potentially leading to unauthorized command execution on the Ironic conductor host.
Users concerned about this vulnerability can disable the IPMI console interface. For those using OpenStack Ironic versions 2026.1, 2025.1, 2025.2, 2024.2, and 2024.1, a patch is available that applies the necessary shell quoting to the console commands, mitigating the injection risk.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2026/04/30/1 | CVE | Mailing ListPatchThird Party Advisory |
| http://www.openwall.com/lists/oss-security/2026/08/19/6 | CVE | |
| https://bugs.launchpad.net/ironic/+bug/2148331 | [email protected] | Issue TrackingThird Party Advisory |
| https://security.openstack.org/ossa/OSSA-2026-008.html | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-829 | Inclusion of Functionality from Untrusted Control Sphere | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openstack ironic | >= 4.3.0, < 26.1.6 >= 27.0.0, < 29.0.5 >= 30.0.0, < 32.0.1 >= 33.0.0, < 35.0.1 |
CPE
Remediation
| |
Change History
9 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 20, 2026 | CVE Modified | [email protected] |
| Aug 20, 2026 | CVE Modified | CVE |
| Jun 17, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 20, 2026 | CVE Modified | [email protected] |
| Apr 30, 2026 | CVE Modified | CVE |
| Apr 28, 2026 | CVE Modified | [email protected] |
| Apr 28, 2026 | New CVE Received | [email protected] |