CVE-2026-90458 | OpenStack Ironic up to 29.1.0/32.1.0/35.1.0/39.0.0 Redfish service vendor_passthru privileges management

October 23, 2026 Yanac

A vulnerability marked as critical has been reported in OpenStack Ironic up to 29.1.0/32.1.0/35.1.0/39.0.0. This impacts the function vendor_passthru of the component Redfish service. The manipulation leads to improper privilege management.

This vulnerability is referenced as CVE-2026-90458. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More