{"schema":"vulnpedia.research/1","cve":"CVE-2026-89419","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://bugs.launchpad.net/ironic/+bug/2166510","tags":[],"source":"mitre","sourceId":"mitre","modified":"2026-10-23T03:44:09.648Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-10-23T03:44:09.648Z","url":"https://bugs.launchpad.net/ironic/+bug/2166510"},{"source":"nvd","sourceId":"CVE-2026-89419","modified":"2026-10-23T19:43:46.190","url":"https://bugs.launchpad.net/ironic/+bug/2166510"}]},{"url":"https://security.openstack.org/ossa/OSSA-2026-048.html","tags":[],"source":"mitre","sourceId":"mitre","modified":"2026-10-23T03:44:09.648Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-10-23T03:44:09.648Z","url":"https://security.openstack.org/ossa/OSSA-2026-048.html"},{"source":"nvd","sourceId":"CVE-2026-89419","modified":"2026-10-23T19:43:46.190","url":"https://security.openstack.org/ossa/OSSA-2026-048.html"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/22/7","tags":[],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T04:13:15.324Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T04:13:15.324Z","url":"http://www.openwall.com/lists/oss-security/2026/10/22/7"},{"source":"nvd","sourceId":"CVE-2026-89419","modified":"2026-10-23T19:43:46.190","url":"http://www.openwall.com/lists/oss-security/2026/10/22/7"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-89419","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-89419"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550542","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550542"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89419","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-89419"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89419","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89419"}]},{"url":"https://launchpad.net/bugs/2166510","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://launchpad.net/bugs/2166510"}]},{"source":"euvd","sourceId":"EUVD-2026-108571","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108571","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-108571","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108571"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-ironic-rhel9","product":"openshift4/ose-ironic-rhel9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-ironic-rhel9?repository_url=registry.redhat.io/openshift4/ose-ironic-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openshift_container_platform_4:openstack-ironic-api","product":"openstack-ironic-api as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-api","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openshift_container_platform_4:openstack-ironic-common","product":"openstack-ironic-common as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-common","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openshift_container_platform_4:openstack-ironic-conductor","product":"openstack-ironic-conductor as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-conductor","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openshift_container_platform_4:openstack-ironic.src","product":"openstack-ironic.src as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openshift_container_platform_4:python3-ironic-tests","product":"python3-ironic-tests as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3-ironic-tests","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_13_(queens):openstack-ironic-api","product":"openstack-ironic-api as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-api","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_13_(queens):openstack-ironic-common","product":"openstack-ironic-common as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-common","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_13_(queens):openstack-ironic-conductor","product":"openstack-ironic-conductor as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-conductor","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_16.2:openstack-ironic-api","product":"openstack-ironic-api as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-api","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_16.2:openstack-ironic-common","product":"openstack-ironic-common as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-common","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_16.2:openstack-ironic-conductor","product":"openstack-ironic-conductor as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-conductor","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_16.2:openstack-ironic.src","product":"openstack-ironic.src as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_17.1:openstack-ironic-api","product":"openstack-ironic-api as a component of Red Hat OpenStack Platform 17.1","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-api","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_17.1:openstack-ironic-common","product":"openstack-ironic-common as a component of Red Hat OpenStack Platform 17.1","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-common","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_17.1:openstack-ironic-conductor","product":"openstack-ironic-conductor as a component of Red Hat OpenStack Platform 17.1","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic-conductor","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_17.1:openstack-ironic.src","product":"openstack-ironic.src as a component of Red Hat OpenStack Platform 17.1","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]},{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json","productId":"red_hat_openstack_platform_18.0:openstack-ironic.src","product":"openstack-ironic.src as a component of Red Hat OpenStack Platform 18.0","status":"known_affected","remediations":[{"category":"workaround","details":"There is no practical operational or policy workaround for this issue. Upgrade to a fixed Ironic build when available. Until a fix is applied, maintenance toggled through this path can block power management and workflow request actions on affected nodes until maintenance is cleared by a user with appropriate access."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/openstack-ironic?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89419","modified":"2026-10-23T04:06:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89419.json"}]}],"vendorCoverage":{"total":18,"shown":18,"omitted":0,"source":"redhat"}}