01 Record

CVE-2026-74250

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.

MediumPUBLISHEDCNA: mitre

Base score6.3 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

View raw JSON CVE Program record

02 Description

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.

03 Metadata

Published

2026-08-14 22:53Z1 HR AGO

Last updated

2026-08-14 22:53Z1 HR AGO

Reserved

2026-08-14

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Medium (CVSS 6.3)

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Weaknesses

CWE-226Sensitive Information in Resource Not Removed Before ReuseBase

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

961645c37009f6a5447f41226984a763828e3abe62734a226d05ede3fe05b922

04 Affected products

VendorProductVersionsPlatforms

OpenStackIronic32.0.0 to < 35.0.2, 36.0.0 to < 38.0.1—

05 References

bugs.launchpad.nethttps://bugs.launchpad.net/ossa/+bug/2163017

01 Record