Ironic Redfish vendor_passthru allows path injection (CVE-2026-90458)
OSSA-2026-047 lists Ironic from 18.1.0 through 39.0.1; the snippet does not name a fix.
2 stories, newest first · one card per story
OSSA-2026-047 lists Ironic from 18.1.0 through 39.0.1; the snippet does not name a fix.
OpenStack Ironic can leak HTTP basic-auth credentials to a configured image server.
Today 1.4K readers · 2.5K views · 1.9K reads · all time 160K views