Threats Tagged 'ghsa-mpf9-7jmw-7hrh'

CVE-2026-90461 is a medium severity vulnerability in OpenStack Ironic up to version 38.0.0. The flaw involves improper restriction of communication channels, causing the software to potentially send a username and password to an unintended remote host when the Image Service uses HTTP(S) Basic Authentication. This can lead to credential exposure. The CVSS score is 6.3, reflecting a network attack vector with high confidentiality impact but requiring low privileges and high attack complexity.