OpenStack ironic-python-agent (IPA) versions 1.0.0 through 11.5.0 sometimes execute the grub-install command from within a chroot environment of the deployed partition image. This can be exploited by an attacker who provides a malicious image, resulting in arbitrary code execution on the system. The vulnerability is classified under CWE-829 (Inclusion of Functionality from Untrusted Control Sphere) and CWE-78 (OS Command Injection). The CVSS v3.1 base score is 8.0 (High), reflecting network attack vector, high attack complexity, low privileges required, no user interaction, and complete confidentiality, integrity, and availability impact. Red Hat's advisory confirms the issue and states that no mitigation or fix currently meets their criteria for deployment and stability. The vulnerability affects multiple versions including 11.0.0 and 11.3.0 explicitly mentioned.

Successful exploitation allows an attacker to execute arbitrary operating system commands with the privileges of the ironic-python-agent process. This can lead to full system compromise including unauthorized code execution, data modification, data disclosure, and denial of service. The attack surface involves supplying a malicious image that triggers grub-install execution within a chroot, enabling code execution under the context of the agent. The vulnerability impacts confidentiality, integrity, and availability of the affected systems.

According to the Red Hat advisory, no effective mitigation or fix currently meets the criteria for ease of use, applicability, or stability. Users should monitor vendor advisories for updates. Until a fix is available, avoid deploying untrusted or unverified images with ironic-python-agent. Consider restricting access to the ironic-python-agent service and limiting the ability to supply images from untrusted sources. Engage with Red Hat Technical Account Managers if applicable for tailored guidance. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.