Medium severity5.3NVD Advisory· Published Jun 5, 2026· Updated Jun 16, 2026

CVE-2026-50589

Description

In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenStack/Ironic2 versions
cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:*range: >=32.0.0,<37.0.0
- (no CPE)range: <37.0.0

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2026/06/06/2nvdMailing ListPatchThird Party Advisory
wiki.openstack.org/wiki/OSSN/OSSN-0099nvdPatchVendor Advisory
bugs.launchpad.net/ironic/+bug/2154288nvdIssue TrackingMitigation

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000