A AegiFlow
MEDIUMCVSS 5.5

CVE-2026-54422

CVE-2026-54422 updated by NVD

Modified
2026-07-26
Sources
nvd

Summary

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.