OpenStack Ironic versions prior to 35.0.2 allow an attacker with the ability to set node.driver_info or node.instance_info to inject a malicious iPXE script. When the node boots, the supplied script is executed, giving the attacker remote code execution on the physical host. This flaw is a typical code‑injection weakness and could lead to full compromise of the node and potentially the entire OpenStack environment.

All OpenStack Ironic installations running a version earlier than 35.0.2 are vulnerable. The issue resides in the node provisioning workflow that accepts user‑supplied data without proper validation.

The CVSS score of 5.8 indicates a moderate severity. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog. The vulnerability requires the attacker to have write access to the Ironic API or web interface to set node.driver_info or node.instance_info. Therefore it is likely limited to users with administrative or privileged roles. If an attacker gains such access, they can inject a malicious iPXE script that will run during the node boot, potentially yielding full control over that node.