DevSecOps Toolkit

CVE record

CVE-2026-44916

LOWCVSS 3

In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.

Vulnerability metadata

Published
2026-05-08T01:46:29.163Z
Modified
2026-05-20T10:46:25.813Z
EPSS
Not available
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

References