CVE-2026-44916

In OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing.

low 3.0 CVSS 3.1
Published: May 8, 2026
Modified: May 8, 2026

Description

In OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing.

References