CVE-2026-54421

mediumpriority · track · 0EPSS 0.003 · 21 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.29% (21st) EPSS

CVSS 6.8 · medium

Is it mine?

9 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · scored 2026-10-27

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

cvss

Technical severity, 0–10. One row per scoring source.

6.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Nsecondary · ENISA EU

v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Nsecondary · cve@mitre.org USexploitability 2.3 · impact 4

v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Nsecondary · OSV

v3.16.2mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-212USCWE-212US

affected products (9)

Products and version ranges known to be affected.

Red Hat OpenStack Ironicall versionscert_bundDEcpe:/a:redhat:openstack:ironic
OpenStack Ironic17.0.0 → 29.0.6enisa_euvdEU
OpenStack Ironic30.0.0 → 32.0.2enisa_euvdEU
OpenStack Ironic33.0.0 → 35.0.2enisa_euvdEU
OpenStack Ironic36.0.0 → 37.0.1enisa_euvdEU
PyPI ironic17.0.0 → 29.0.6osvUSpkg:pypi/ironic
PyPI ironic30.0.0 → 32.0.2osvUSpkg:pypi/ironic
PyPI ironic33.0.0 → 35.0.2osvUSpkg:pypi/ironic
PyPI ironic36.0.0 → 37.0.1osvUSpkg:pypi/ironic

advisories (3)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-1912Red Hat OpenStack: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2026-06-14csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.
GHSA-j4cw-mcg2-2q78OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties2026-06-14ghsa · osvUS
In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.
PYSEC-2026-3852OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties2026-09-10vendor · osvUS
In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd osv cert_bund NVD CVE.org MITRE

published 2026-06-14modified 2026-07-23

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan