BackPT-2026-58970Published2026-06-04·Updated2026-06-04GeneralReferences · 7Description byOSVCVSS 3.15.8MediumMetricsAV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:NOpenStack Ironic through 35.0.x allows Boot Script Injection.ExploitabilityFixVendorsPypiAffected productsIronicWeakness enumerationCWE-669: Incorrect Resource Transfer Between SpheresRelated identifiersGHSA-JRH2-F5JC-XPGR Found an issue in the description? Have something to add? Feel free to write us 👾 dbugs@ptsecurity.comReferences · 7 https://osv.dev/vulnerability/GHSA-jrh2-f5jc-xpgrVendor Advisory https://nvd.nist.gov/vuln/detail/CVE-2026-46447Security Note https://github.com/openstack/ironic⭐ 564🔗 381·Note http://openwall.com/lists/oss-security/2026/06/03/11Note https://security.openstack.org/ossa/OSSA-2026-017.htmlNote http://openwall.com/lists/oss-security/2026/06/15/9Note https://bugs.launchpad.net/ironic/+bug/2150624Note