CVE-2026-71201
Received Received - Intake

Portgroup Information Disclosure in OpenStack Ironic

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: MITRE

Description
In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-05
Last Modified
2026-08-05
Generated
2026-08-05
AI Q&A
2026-08-05
EPSS Evaluated
N/A
NVD
CVE-2026-71201
EUVD
EUVD-2026-53124

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
openstack ironic to 38.0.0 (inc)
openstack ironic 38.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-71201 is a vulnerability in OpenStack Ironic where a project reader can bypass access controls to view portgroups assigned to Nodes owned by other projects. This happens when a user queries portgroups using a shard filter, which does not enforce project-based restrictions like the standard list path does.

Detection Guidance

To detect this vulnerability, check OpenStack Ironic logs for unauthorized access attempts to portgroups using shard filters. Look for queries with shard parameters that return portgroups outside the expected project scope. Review API access logs for unusual requests to the /v1/portgroups/shard endpoint.

Impact Analysis

An attacker with project reader access could access sensitive portgroup details, including node UUIDs and metadata, belonging to other projects. This could lead to unauthorized information disclosure or potential lateral movement within the OpenStack environment.

Compliance Impact

This vulnerability could violate data isolation requirements in GDPR and HIPAA by allowing unauthorized access to project-specific resources. Compliance may be impacted if sensitive data is exposed to unauthorized users.

Mitigation Strategies

Apply the upstream patches provided for your Ironic version. Update to the latest stable branch (e.g., stable/2026.1, bugfix/38.0). Ensure project filtering is enforced on all portgroup API endpoints, including shard-based paths. Monitor for any ongoing exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-71201. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart