CVE-2015-5306: OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might al...

Security readout for executives and security teams

This flaw affects OpenStack Ironic Inspector when Flask debug mode is enabled. A remote attacker might trigger an error, reach the debug console, and run Python code on the service host. Business urgency depends on whether any inspector service is reachable with debug enabled. Exposure is most likely in OpenStack bare-metal provisioning environments running Ironic Inspector with debug mode enabled, especially if the service is reachable beyond trusted management networks. Prioritize verification if OpenStack Ironic Inspector is used. The impact can be severe, but the dangerous condition is debug mode exposure, so urgency depends on configuration and network reachability. Mitigation focus: Disable debug mode on all Ironic Inspector services.; Apply relevant Red Hat or OpenStack vendor updates and guidance.; Restrict inspector access to trusted management networks only..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.