This vulnerability (CVE-2026-66138) affects OpenStack Ironic Python Agent versions including 6.0.0, 11.0.0, 11.3.0, and 11.6.0. It arises from improper neutralization of special elements in the ntp_server configuration parameter, which is passed directly to a shell command. A project-scoped user with the manager role can exploit this to achieve arbitrary code execution on the agent. The CVSS 3.1 base score is 7.2 (High), reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and full confidentiality, integrity, and availability impact. No patch or official remediation guidance is currently available.

Successful exploitation results in arbitrary code execution on the running Ironic Python Agent process, potentially allowing an attacker with project-scoped manager privileges to fully compromise the agent. This can lead to complete control over the affected system component, impacting confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict project-scoped user privileges to trusted users only and avoid untrusted configuration changes to the ntp_server parameter. Monitor vendor channels for updates and apply official patches once released.