CVE-2025-44021

https://notcve.org/view.php?id=CVE-2025-44021

08 May 2025 — OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecur... • https://bugs.launchpad.net/ironic/+bug/2107847 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •