{"id":"CVE-2024-44082","details":"In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data. The affected/fixed version details are: Ironic: \u003c21.4.3, \u003e=22.0.0 \u003c23.0.2, \u003e=23.1.0 \u003c24.1.2, \u003e=25.0.0 \u003c26.0.1; Ironic-python-agent: \u003c9.4.2, \u003e=9.5.0 \u003c9.7.1, \u003e=9.8.0 \u003c9.11.1, \u003e=9.12.0 \u003c9.13.1.","modified":"2026-04-10T05:16:37.996992Z","published":"2024-09-06T01:15:11Z","references":[{"type":"WEB","url":"https://bugs.launchpad.net/ironic/+bug/2071740"},{"type":"WEB","url":"https://security.openstack.org/ossa/OSSA-2024-003.html"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2024/09/04/4"}],"schema_version":"1.7.5"}