CVE-2025-44021
published 2025-05-08CVE-2025-44021: OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious…
PriorityP411low2.8CVSS 3.1
AVLACHPRLUINSCCNILAN
EPSS
0.15%
5.1th percentile
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | ironic | < ironic 1:29.0.0-6 (forky) | ironic 1:29.0.0-6 (forky) |
| openstack | ironic | >= 0 < 1:29.0.0-6 | 1:29.0.0-6 |
| openstack | ironic | >= 0 < 1:29.0.0-6 | 1:29.0.0-6 |
| openstack | ironic | >= 0 < 24.1.3 | 24.1.3 |
| openstack | ironic | >= 24 < 24.1.3 | 24.1.3 |
| openstack | ironic | >= 25 < 26.1.1 | 26.1.1 |
| openstack | ironic | >= 25.0.0 < 26.1.1 | 26.1.1 |
| openstack | ironic | >= 27 < 29.0.1 | 29.0.1 |
| openstack | ironic | >= 27.0.0 < 29.0.1 | 29.0.1 |
CVSS provenance
nvdv3.12.8LOWCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
osv2.8LOW
vendor_debian2.8LOW
vendor_redhat2.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
openstack-ironic: unsafe image file:// paths
vendor_redhat·2025-05-08·CVSS 2.8
CVE-2025-44021 [LOW] CWE-427 openstack-ironic: unsafe image file:// paths
openstack-ironic: unsafe image file:// paths
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1.
A flaw was found in Ironic. It did not filter file:// paths when used as an image source except to ensure they were a file. This is
Debian
CVE-2025-44021: ironic - OpenStack Ironic before 29.0.1 can write unintended files to a target node disk ...
vendor_debian·2025·CVSS 2.8
CVE-2025-44021 [LOW] CVE-2025-44021: ironic - OpenStack Ironic before 29.0.1 can write unintended files to a target node disk ...
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 1:29.0.0-6)
sid: resolved (fixed in 1:29.0.0-6)
trixie: resolved (fixed in 1:29.0.0-6)
GHSA
OpenStack Ironic fails to restrict paths used for file:// image URLs
ghsa·2025-05-08
CVE-2025-44021 [LOW] CWE-22 OpenStack Ironic fails to restrict paths used for file:// image URLs
OpenStack Ironic fails to restrict paths used for file:// image URLs
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1.
OSV
OpenStack Ironic fails to restrict paths used for file:// image URLs
osv·2025-05-08
CVE-2025-44021 [LOW] OpenStack Ironic fails to restrict paths used for file:// image URLs
OpenStack Ironic fails to restrict paths used for file:// image URLs
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1.
OSV
CVE-2025-44021: OpenStack Ironic before 29
osv·2025-05-08·CVSS 2.8
CVE-2025-44021 [LOW] CVE-2025-44021: OpenStack Ironic before 29
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-05-08
Published