CVE-2026-54421 – OpenStack Ironic Information Disclosure

CVE ID :CVE-2026-54421

Published : June 14, 2026, 4:16 a.m. | 1 hour, 25 minutes ago

Description :In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

Severity: 6.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…