CVE-2026-44918

OpenStack Ironic versions prior to 37.0.1 are vulnerable to unauthorized cross-project creation or modification of nodes, potentially allowing attackers to manipulate resources across different projects. This could lead to unauthorized access and control over cloud infrastructure components. Organizations using OpenStack Ironic should prioritize this vulnerability to mitigate risks associated with unauthorized resource management.