CVE-2026-54422
Received Received - Intake

OpenStack Ironic Python Agent Credential Exposure Vulnerability

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: MITRE

Description
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-54422
EUVD
EUVD-2026-48475

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
openstack ironic_python_agent From 10.2.0 (inc) to 10.2.3 (exc)
openstack ironic_python_agent From 11.0.0 (inc) to 11.2.1 (exc)
openstack ironic_python_agent From 11.3.0 (inc) to 11.5.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-54422 is a vulnerability in OpenStack Ironic Python Agent (IPA) versions 10.2.0 to 10.2.2, 11.0.0 to 11.2.0, and 11.3.0 to 11.5.0. It allows a malicious bootc container deployed via IPA to extract credentials used to download the container from an OCI registry. The issue occurs because IPA forwards operator credentials to tenant-controlled containers, which can then access these secrets through privileged Podman options.

Detection Guidance

To detect this vulnerability, check if the bootc deploy_interface is enabled on Ironic conductors. Review logs for unauthorized container deployments or access to /root/.config/containers/auth.json. Inspect Podman processes for privileged flags like --pid=host. Verify if tenant-controlled bootc images are running with elevated privileges.

Impact Analysis

If exploited, this vulnerability could allow an attacker with the ability to deploy containers to steal registry credentials. These credentials might grant access to private registry resources beyond the affected node, potentially leading to unauthorized image pulls, data breaches, or further attacks within the registry. The impact depends on the privileges of the exposed credentials.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations due to unauthorized access to sensitive data or systems. Exposure of registry credentials may result in data breaches, violating confidentiality requirements. Organizations must address this to maintain compliance with data protection and security standards.

Mitigation Strategies

Apply provided patches for your OpenStack version or disable the bootc deploy_interface on Ironic conductors. Exploitation requires the ability to deploy arbitrary containers via bootc deploy_interface, so restrict this capability if patches cannot be applied immediately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-54422. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart