Fluid Attacks Database

Description

OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	ironic	=1:29.0.0-7 \|\| =1:32.0.0-1 \|\| =1:32.0.0-2 \|\| =1:32.0.0-4 \|\| =1:32.0.0-5 \|\| =1:32.0.0-6 \|\| =1:32.0.0-7 \|\| =1:34.0.0-1 \|\| =1:35.0.0-1 \|\| =1:35.0.0-2 \|\| =1:35.0.1-1 \|\| =1:35.0.1-2 \|\| =1:35.0.1-3 \|\| =1:35.0.1-5 \|\| =1:35.0.1-6 \|\| >=0 <1:35.0.1-7	1:35.0.1-7
debian 13	ironic	=1:29.0.0-7 \|\| =1:29.0.5-0+deb13u1 \|\| =1:29.0.5-0+deb13u2 \|\| >=0 <1:29.0.5-0+deb13u3	1:29.0.5-0+deb13u3
debian 14	ironic-python-agent	=10.2.0-3 \|\| =11.1.0-1 \|\| =11.2.0-1 \|\| =11.2.0-2 \|\| =11.4.0-1 \|\| =11.5.0-1 \|\| =11.5.0-2 \|\| >=0 <11.5.0-3	11.5.0-3
debian 13	ironic-python-agent	=10.2.0-3 \|\| =11.1.0-1 \|\| =11.2.0-1 \|\| =11.2.0-2 \|\| =11.4.0-1 \|\| =11.5.0-1 \|\| =11.5.0-2 \|\| =11.5.0-3 \|\| =11.5.0-4 \|\| =11.5.0-5 \|\| =12.0.0-1	-
pypi	ironic-python-agent	>=1.0.0 <11.6.0	11.6.0
debian 12	ironic	=1:21.1.0-3 \|\| =1:21.1.0-3+deb12u1 \|\| =1:21.3.0-1 \|\| =1:21.4.0-1 \|\| =1:21.4.0-2 \|\| =1:21.4.0-3 \|\| =1:21.4.0-4 \|\| =1:21.4.4-0+deb12u1 \|\| >=0 <1:21.4.4-0+deb12u2	1:21.4.4-0+deb12u2

Aliases

1. CVE-2026-430032. NVD-2026-430033. OSV-DEBIAN-2026-430034. OSV-2026-430035. GCVE-2026-430036. SECURITY-TRACKER-CVE-2026-430037. access.redhat.com8. access.redhat.com9. access.redhat.com10. access.redhat.com11. ACCESS-CVE-2026-4300312. SECURITY-cve-2026-43003.json

References

1. https://bugs.launchpad.net/ironic-python-agent/+bug/21483102. https://bugzilla.redhat.com/show_bug.cgi?id=24643063. https://github.com/openstack/ironic-python-agent/blob/236b33abffe6688afc39c21e351cc3889b3db2dd/ironic_python_agent/efi_utils.py#L134-L1394. https://github.com/pypa/advisory-database/tree/main/vulns/ironic-python-agent/PYSEC-2026-205.yaml5. https://opendev.org/openstack/ironic-python-agent/commit/6cd463a657edcddf7b79416ac69bdef5b6f300996. http://www.openwall.com/lists/oss-security/2026/06/16/11

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.