CVE-2026-46447: OpenStack Ironic boot script injection via unsanitized kernel parameters

CVE-2026-46447 · Severity: medium · CVSS 5.8 · Published 2026-06-03

OpenStack Ironic, a service for managing and provisioning bare metal machines, contains a vulnerability that allows for boot script injection. An attacker with high-level administrative access can inject malicious commands into the boot process of a server. This could allow the attacker to redirect the server to boot from a malicious source or compromise the security of the provisioning network.

Technologies: OpenStack Ironic, ironic (PyPI). Vendors: OpenStack, PyPI.

Quick answers

Is CVE-2026-46447 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-46447 being exploited in the wild.
How severe is CVE-2026-46447?
Medium severity, with a CVSS score of 5.8, published 3 June 2026.
Which products and versions are affected?
OpenStack Ironic >= 17.0.0, < 26.1.7; >= 27.0.0, < 29.0.6; >= 30.0.0, < 32.0.2; >= 33.0.0, < 35.0.2, >=17.0.0 <26.1.7, >=27.0.0 <29.0.6, >=30.0.0 <32.0.2, >=33.0.0 <35.0.2; ironic (PyPI) ECOSYSTEM:introduced=17.0.0,fixed=26.1.7, ECOSYSTEM:introduced=17.0.0,fixed=26.1.7,introduced=27.0.0,fixed=29.0.6,introduced=30.0.0,fixed=32.0.2,introduced=33.0.0,fixed=35.0.2.
Is there a fix for CVE-2026-46447?
Yes. ironic (PyPI): upgrade to 26.1.7, 35.0.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-46447 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-46447?
Check whether you run OpenStack Ironic or ironic (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • ironic (PyPI): upgrade to 26.1.7, 35.0.2 or later
    pip install "ironic>=35.0.2"

Technical details

A vulnerability in OpenStack Ironic's kernel command line override logic allows for iPXE script injection. The root cause is the lack of sanitization for user-controlled values in 'instance_info' and 'driver_info' (specifically 'kernel_append_params' and 'ramdisk_kernel_arguments'), which are interpolated into PXE/iPXE boot templates. An attacker with sufficient privileges to modify node configuration can inject newlines or control characters to execute arbitrary iPXE commands. This can be used to redirect a node's boot process to an attacker-controlled kernel/initrd or leak sensitive agent tokens. The vulnerability is addressed by stripping control characters and preventing newline injection in boot parameters.

Affected products

  • OpenStack Ironic >= 17.0.0, < 26.1.7; >= 27.0.0, < 29.0.6; >= 30.0.0, < 32.0.2; >= 33.0.0, < 35.0.2

Identifiers

  • CVE-2026-46447
  • GHSA-jrh2-f5jc-xpgr
  • PYSEC-2026-3471

Timeline

  • 2026-04-29: other: Vulnerability reported to OpenStack via Launchpad
  • 2026-06-03: advisory: OpenStack Security Advisory OSSA-2026-017 published
  • 2026-06-04: disclosed: GHSA-jrh2-f5jc-xpgr published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.