CVE-2025-44021

Description

A flaw was found in Ironic. It did not filter file:// paths when used as an image source except to ensure they were a file. This issue could cause config files from well-known paths to be written to disk on a node.

Statement

This is rated as a moderate vulnerability because it requires pre-existing privileged access to Ironic’s API or configuration to exploit. While misuse of file:// paths could expose sensitive host files by writing them to provisioned nodes, the flaw does not enable code execution or privilege escalation on the host. Its impact is limited to information disclosure during provisioning, and secure deployments typically restrict file:// usage or isolate Ironic’s file access, further reducing the risk.

Mitigation

Currently, no mitigation is available for this vulnerability.

Common Vulnerability Scoring System (CVSS) Score Details

Info alert:Important note

CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).

The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 Score Breakdown

Red HatNVDcve.org
Base Score5.4N/AN/A
Attack VectorNetworkN/AN/A
Attack ComplexityLowN/AN/A
Privileges RequiredLowN/AN/A
User InteractionNoneN/AN/A
ScopeUnchangedN/AN/A
ConfidentialityLowN/AN/A
Integrity ImpactLowN/AN/A
Availability ImpactNoneN/AN/A

Vector

Red Hat: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Understanding the Weakness (CWE)

CWE-427

Confidentiality,Integrity,Availability

Technical Impact: Execute Unauthorized Code or Commands

Frequently Asked Questions

Not sure what something means? Check out our Security Glossary.

Want to get errata notifications? Sign up here.