CVE-2026-43003: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in OpenStack ironic-python-agent
CVE-2026-43003 is a high-severity vulnerability in OpenStack ironic-python-agent versions 1. 0. 0 through 11. 5. 0. The issue arises because the agent sometimes executes grub-install from within a chroot environment of the deployed partition image, which can lead to code execution if the image is malicious. This vulnerability is classified under CWE-829, indicating inclusion of functionality from an untrusted control sphere. No official patch or remediation guidance is currently available from the vendor. The vulnerability has not been reported as exploited in the wild.
AI Analysis
Technical Summary
OpenStack ironic-python-agent versions 1.0.0 through 11.5.0 contain a vulnerability (CVE-2026-43003) where grub-install is executed within a chroot of the deployed partition image. This behavior allows code execution when a malicious image is deployed, due to inclusion of functionality from an untrusted control sphere (CWE-829). The CVSS 3.1 score is 8.0, reflecting high impact with attack vector requiring adjacent network access, high complexity, low privileges, no user interaction, and complete confidentiality, integrity, and availability impact.
Potential Impact
Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the system running ironic-python-agent by deploying a malicious image. This can lead to full compromise of the affected system, including confidentiality, integrity, and availability impacts. The attack requires adjacent network access and low privileges but no user interaction.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when deploying untrusted images with ironic-python-agent. Restricting access to the ironic-python-agent service and validating images prior to deployment may reduce risk.
CVE-2026-43003: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in OpenStack ironic-python-agent
Description
CVE-2026-43003 is a high-severity vulnerability in OpenStack ironic-python-agent versions 1. 0. 0 through 11. 5. 0. The issue arises because the agent sometimes executes grub-install from within a chroot environment of the deployed partition image, which can lead to code execution if the image is malicious. This vulnerability is classified under CWE-829, indicating inclusion of functionality from an untrusted control sphere. No official patch or remediation guidance is currently available from the vendor. The vulnerability has not been reported as exploited in the wild.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenStack ironic-python-agent versions 1.0.0 through 11.5.0 contain a vulnerability (CVE-2026-43003) where grub-install is executed within a chroot of the deployed partition image. This behavior allows code execution when a malicious image is deployed, due to inclusion of functionality from an untrusted control sphere (CWE-829). The CVSS 3.1 score is 8.0, reflecting high impact with attack vector requiring adjacent network access, high complexity, low privileges, no user interaction, and complete confidentiality, integrity, and availability impact.
Potential Impact
Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the system running ironic-python-agent by deploying a malicious image. This can lead to full compromise of the affected system, including confidentiality, integrity, and availability impacts. The attack requires adjacent network access and low privileges but no user interaction.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when deploying untrusted images with ironic-python-agent. Restricting access to the ironic-python-agent service and validating images prior to deployment may reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-05-01T00:00:00.000Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69f46607cbff5d861092e804
Added to database: 5/1/2026, 8:36:23 AM
Last enriched: 5/1/2026, 8:51:20 AM
Last updated: 5/1/2026, 10:59:17 AM
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.