CVE-2026-66138

State: Published
Severity: 7.2 High
Published: Jul 24, 2026
Updated: Jul 24, 2026
Reserved: Jul 24, 2026

Description

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntp_server is passed to a shell.

Scores

CVSS	Score	Vector	Source
3.1	7.2 High	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	mitre

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
Ironic Python AgentOpenStack	11.6.0Affected 11.3.0 through 11.5.1Affected 11.0.0 through 11.2.1Affected 6.0.0 through 10.2.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.