← All advisories

Medium severity5.9NVD Advisory· Published Jun 4, 2026· Updated Jul 22, 2026

CVE-2026-48681

CVE-2026-48681

Description

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ironicPyPI	>= 17.0.0, < 26.1.7	26.1.7
ironicPyPI	>= 27.0.0, < 29.0.6	29.0.6
ironicPyPI	>= 30.0.0, < 32.0.2	32.0.2
ironicPyPI	>= 33.0.0, < 35.0.2	35.0.2

Affected products

2

OpenStack/Ironic2 versions
cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:*range: >=17.0.0,<26.1.7
- (no CPE)range: <35.0.2

Patches

Vulnerability mechanics

References

5

www.openwall.com/lists/oss-security/2026/06/03/12nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-9v62-qx4c-44x5ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-48681ghsaADVISORY
www.openwall.com/lists/oss-security/2026/06/03/12nvdMailing ListThird Party AdvisoryWEB
bugs.launchpad.net/ironic/+bug/2148333nvdIssue TrackingMitigationWEB

News mentions

1

OpenStack: Critical RCE and Multiple Ironic Flaws Disclosed Together
Vypr Intelligence · Jun 4, 2026