Is CVE-2026-54423 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-54423?

CVE-2026-54423 has a CVSS v3 severity of HIGH (8.2).

Back

CVE-2026-54423

Description

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.