Threats Tagged 'ghsa-wj9f-vqw7-855c'

1 threat

Threats Tagged 'ghsa-wj9f-vqw7-855c'
		Signals				Vote and star
Medium	7.2	EPSS 0.5%	CVE-2026-66138ironic-python-agent · In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running… (CVE-2026-66138) Medium7.2EPSS 0.5%2026-07-24CVE-2026-66138 OpenStack Ironic Python Agent versions up to and including 11.6.0 contain a vulnerability where a project-scoped user with the manager role can execute arbitrary code on a running agent. This occurs because the ntp_server configuration value is passed directly to a shell without proper sanitization, allowing command injection. The vulnerability has a CVSS score of 7.2, indicating a medium severity level. EPSS 0.5%Vulnerability #ghsa-wj9f-vqw7-855c #cwe-78 0	GCVE Database	2026-07-24	0

Showing 1–1 of 1 result

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Pro Console Lifetime · Custom feeds · Automations: email, Slack, webhooks, SIEM/MISP · API access (baseline limits)