In OpenStack Ironic Python Agent versions up to and including 11.6.0, a project-scoped user possessing the manager role can exploit improper handling of the ntp_server configuration parameter. The value of ntp_server is passed to a shell command without adequate sanitization, enabling arbitrary code execution on the running Ironic-Python-Agent process. This vulnerability is identified as CVE-2026-66138 and is associated with CWE-78 (OS Command Injection). The CVSS v3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

An attacker with project-scoped manager privileges can execute arbitrary code on the host running the Ironic Python Agent. This can lead to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability allows command injection via the ntp_server configuration parameter, potentially enabling control over the agent and underlying host.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict project-scoped users with the manager role from modifying the ntp_server configuration or deploying untrusted configurations. Monitor vendor channels for updates and apply patches promptly once released.