CVE-2026-44919: In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.

PriorityP422medium4.3CVSS 3.1

AVNACLPRLUINSUCNINAL

EPSS

0.47%

37.2th percentile

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
openstack	ironic	0 – 36.0.0	—
openstack	ironic	>= 23.0.4 < 29.0.6	29.0.6
openstack	ironic	>= 30.0.0 < 32.0.2	32.0.2
openstack	ironic	>= 33.0.0 < 35.0.2	35.0.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.