CVE-2026-74250: Openstack Ironic

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.

Affected products

• Openstack Ironic: from 32.0.0, before 35.0.2 (fixed in 35.0.2); from 36.0.0, before 38.0.1 (fixed in 38.0.1)

Published 2026-08-14. Last modified 2026-09-01.