Executive brief
A vulnerability exists in OpenStack Ironic, a service used to manage and provision bare metal servers. An authenticated user with permissions to perform deployment tasks can trick the system into sending sensitive login credentials to a server they control. This could allow an attacker to gain unauthorized access to other OpenStack services and data that the Ironic service is permitted to manage.
Technical details
A vulnerability in OpenStack Ironic's iDRAC configuration mold import code (CWE-669) allows for credential forwarding to arbitrary endpoints. When a user invokes the 'molds' feature to import a configuration, they can specify a user-controlled URL for the authorization request. Ironic fails to validate this URL, causing it to forward either a time-limited Keystone token or basic storage credentials to the remote endpoint. An attacker must be authenticated with sufficient privileges to execute clean or deploy steps. Successful exploitation grants the attacker a token with the same access level as the Ironic service itself across the OpenStack environment. The feature was deprecated in version 2024.1 and removed in 2026.2; patches are available for supported versions.
Affected products
- OpenStack Ironic >=17.0.0 <26.1.6, >=27.0.0 <29.0.5, >=30.0.0 <32.0.1, >=33.0.0 <35.0.1
Timeline
- 2026-05-05: disclosed: Vulnerability reported by Metal3.io Security Team
- 2026-05-05: advisory
- 2026-05-05: patched