This vulnerability (CVE-2026-66138) affects OpenStack Ironic Python Agent up to version 11.6.0. It arises from improper neutralization of special elements in the ntp_server configuration parameter, which is passed directly to a shell command. A project-scoped user with the manager role can exploit this to achieve arbitrary code execution on the host running the agent. The CVSS 3.1 base score is 7.2, indicating high severity with network attack vector, low attack complexity, high privileges required, no user interaction, and full confidentiality, integrity, and availability impact.

Successful exploitation allows a privileged project-scoped user to execute arbitrary code on the system running the Ironic Python Agent. This can lead to full compromise of the affected host, including unauthorized access, data modification, and service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict project-scoped users with the manager role from modifying the ntp_server configuration or running the Ironic Python Agent. Monitor vendor channels for updates and apply patches promptly once released.