{"cve":"CVE-2026-42997","nvd":{"published":"2026-05-05T19:16:22.817","modified":"2026-07-24T20:10:00.147","status":"Modified","description":"An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","score":7.7},"cwes":["CWE-669","CWE-201"],"references":["https://security.openstack.org/ossa/OSSA-2026-010.html","https://www.openwall.com/lists/oss-security/2026/05/05/10","http://www.openwall.com/lists/oss-security/2026/05/05/10","https://access.redhat.com/errata/RHSA-2026:39811","https://access.redhat.com/security/cve/CVE-2026-42997"],"products":["openstack:ironic"],"source":"nvd","synced_at":"2026-10-19T22:33:55.586217763+00:00"},"epss":{"cve":"CVE-2026-42997","score":0.00433,"percentile":0.3765,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-54w4-233h-x86g","url":"https://osv.dev/vulnerability/GHSA-54w4-233h-x86g","summary":"OpenStack Ironic has an Incorrect Resource Transfer Between Spheres","modified":"2026-09-10T03:50:45.591571590Z","packages":[{"ecosystem":"PyPI","name":"ironic-python-agent","purl":"pkg:pypi/ironic-python-agent","ranges":[">=33.0.0 <35.0.1"],"fixed":["35.0.1"]},{"ecosystem":"PyPI","name":"ironic-python-agent","purl":"pkg:pypi/ironic-python-agent","ranges":[">=30.0.0 <32.0.1"],"fixed":["32.0.1"]},{"ecosystem":"PyPI","name":"ironic-python-agent","purl":"pkg:pypi/ironic-python-agent","ranges":[">=27.0.0 <29.0.5"],"fixed":["29.0.5"]},{"ecosystem":"PyPI","name":"ironic-python-agent","purl":"pkg:pypi/ironic-python-agent","ranges":["<26.1.6"],"fixed":["26.1.6"]}]},{"id":"PYSEC-2026-2526","url":"https://osv.dev/vulnerability/PYSEC-2026-2526","summary":"OpenStack Ironic has an Incorrect Resource Transfer Between Spheres","modified":"2026-08-05T16:15:09.603502207Z","packages":[{"ecosystem":"PyPI","name":"ironic-python-agent","purl":"pkg:pypi/ironic-python-agent","ranges":["<26.1.6",">=27.0.0 <29.0.5",">=30.0.0 <32.0.1",">=33.0.0 <35.0.1"],"fixed":["26.1.6","29.0.5","32.0.1","35.0.1"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}