{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-66138", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-07-24T03:53:11.727Z", "datePublished": "2026-07-24T03:53:12.142Z", "dateUpdated": "2026-07-24T23:22:05.285Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Ironic Python Agent", "vendor": "OpenStack", "versions": [{"status": "affected", "version": "11.6.0", "versionType": "semver"}, {"lessThanOrEqual": "11.5.1", "status": "affected", "version": "11.3.0", "versionType": "semver"}, {"lessThanOrEqual": "11.2.1", "status": "affected", "version": "11.0.0", "versionType": "semver"}, {"lessThanOrEqual": "10.2.3", "status": "affected", "version": "6.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "In OpenStack Ironic Python Agent through 11.6.0, a\u00a0project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntp_server is passed to a shell."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-07-24T03:53:12.142Z"}, "references": [{"url": "https://bugs.launchpad.net/ironic-python-agent/+bug/2160050"}, {"url": "https://security.openstack.org/ossa/OSSA-2026-027.html"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.6.0", "versionEndIncluding": "11.6.0"}, {"vulnerable": true, "criteria": "cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.3.0", "versionEndIncluding": "11.5.1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0.0", "versionEndIncluding": "11.2.1"}, {"vulnerable": true, "criteria": "cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.0.0", "versionEndIncluding": "10.2.3"}]}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-24T12:26:51.060531Z", "id": "CVE-2026-66138", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-24T12:27:00.582Z"}}, {"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/24/26"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-24T23:22:05.285Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/24/26"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-24T23:22:05.285Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-66138", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-24T12:26:51.060531Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-24T12:26:57.314Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "OpenStack", "product": "Ironic Python Agent", "versions": [{"status": "affected", "version": "11.6.0", "versionType": "semver"}, {"status": "affected", "version": "11.3.0", "versionType": "semver", "lessThanOrEqual": "11.5.1"}, {"status": "affected", "version": "11.0.0", "versionType": "semver", "lessThanOrEqual": "11.2.1"}, {"status": "affected", "version": "6.0.0", "versionType": "semver", "lessThanOrEqual": "10.2.3"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://bugs.launchpad.net/ironic-python-agent/+bug/2160050"}, {"url": "https://security.openstack.org/ossa/OSSA-2026-027.html"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "descriptions": [{"lang": "en", "value": "In OpenStack Ironic Python Agent through 11.6.0, a\u00a0project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntp_server is passed to a shell."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "11.6.0", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "11.5.1", "versionStartIncluding": "11.3.0"}, {"criteria": "cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "11.2.1", "versionStartIncluding": "11.0.0"}, {"criteria": "cpe:2.3:a:openstack:ironic_python_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "10.2.3", "versionStartIncluding": "6.0.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-07-24T03:53:12.142Z"}}}, "cveMetadata": {"cveId": "CVE-2026-66138", "state": "PUBLISHED", "dateUpdated": "2026-07-24T23:22:05.285Z", "dateReserved": "2026-07-24T03:53:11.727Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-07-24T03:53:12.142Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{}

{"acknowledgement": "This issue was discovered by Dmitry Tantsur (Red Hat (Metal3.io Security Team)) and Tuomo Tanskanen (Ericsson Software Technology (Metal3.io Security Team)). Upstream acknowledges Dmitry Tantsur (Red Hat) and Tuomo Tanskanen (Ericsson Software Technology) as the original reporters.", "bugzilla": {"description": "ironic-python-agent: OpenStack Ironic Python Agent: Arbitrary code execution via malicious configuration", "id": "2506676", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506676"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-78", "details": ["A vulnerability was found in Ironic-Python-Agent's (IPA) time syncing code. The value of the ntp_server configuration option is inserted into a shell command without sanitization. This command is run as root very early in the IPA startup flow, allowing an attacker to run arbitrary commands as root. This value can be set in three ways; directly in an operator-created ramdisk, set via kernel command line using Ironic, or passing the parameters via mDNS responder for mDNS enabled installation. For the most common, and highest security risk case, this means a Manager role associated with the project set as node.owner may be able to trigger this vulnerability."], "mitigation": {"lang": "en:us", "value": "Remove the chronyd binary from the Ironic Python Agent (IPA) ramdisk image. The vulnerable code path is only reached when chronyd is detected as available. Without chronyd, IPA will either use ntpdate for time synchronization (which is not affected by this vulnerability, as it passes the NTP server address as a separate process argument without shell interpolation) or skip time synchronization entirely if neither tool is available. Additionally, restrict and segment the provisioning network to prevent rogue mDNS responders, and review OpenStack RBAC policies to limit which users can modify kernel_append_params on bare metal nodes."}, "name": "CVE-2026-66138", "package_state": [{"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openshift4/ose-ironic-agent-rhel9", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openstack-ironic-python-agent", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Affected", "package_name": "openstack-ironic-python-agent", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:openstack:17.1", "fix_state": "Affected", "package_name": "openstack-ironic-python-agent", "product_name": "Red Hat OpenStack Platform 17.1"}, {"cpe": "cpe:/a:redhat:openstack:18.0", "fix_state": "Affected", "package_name": "openstack-ironic-python-agent", "product_name": "Red Hat OpenStack Platform 18.0"}], "public_date": "2026-07-24T03:53:12Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-66138\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-66138\nhttps://bugs.launchpad.net/ironic-python-agent/+bug/2160050\nhttps://launchpad.net/bugs/2160050\nhttps://opendev.org/openstack/ossa/commit/b6468150ceb59957bfe541d431e90b9651abed51\nhttps://review.opendev.org/c/openstack/ironic-python-agent/+/998486\nhttps://security.openstack.org/ossa/OSSA-2026-027.html"], "statement": "Red Hat OpenStack Platform ships ironic-python-agent as part of bare metal provisioning. Deployments using chrony for time synchronization in the IPA ramdisk are affected by this vulnerability. The impact is limited to the bare metal node running the IPA ramdisk; there is no known method for leveraging ramdisk shell access to compromise the Ironic control plane service.\nIn RHOSP 18.0 (Ironic 21.0+), a user with the project-scoped Manager role and node ownership can set kernel command line parameters that include a malicious ipa-ntp-server value. The Manager role is a delegated, limited-scope role introduced in Ironic 21.0.0; a manager-scoped user cannot change base service configuration or templates, cannot access nodes in other projects, and cannot pivot the attack beyond their isolated project scope.\nIn RHOSP 17.1 (Ironic <21.0), the Manager role does not exist. Exploitation requires either a user with the admin role, or manually starting the agent outside of Ironic's context to trigger the mDNS configuration loading path, which is not a default deployment configuration.\nThe mDNS attack vector is related to legacy Kubernetes Native Infrastructure efforts and is not in a standard deployment path.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "11.6.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[11.3.0,11.5.1]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[11.0.0,11.2.1]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.0.0,10.2.3]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Ironic Python Agent", "source": "cna", "vendor": "OpenStack"}, "product": "ironic-python-agent", "vendor": "openstack"}], "created": "2026-07-24T05:30:05.112671+00:00", "title": "OS Command Injection in Ironic Python Agent via NTP Server Configuration", "updated": "2026-07-26T04:00:05.521002+00:00", "vendors": ["openstack", "openstack$PRODUCT$ironic-python-agent"]}