{"items":[{"id":"CVE-2026-66138","published":"2026-07-24T03:53:12.142Z","updated":"2026-07-24T23:22:05.285Z","title":"In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running…","severity":"HIGH","score":7.2,"vendor":"OpenStack","product":"Ironic Python Agent","kev":false,"epss":0.00475,"kevAdded":null},{"id":"CVE-2026-54422","published":"2026-07-24T03:42:26.433Z","updated":"2026-07-24T12:26:32.687Z","title":"In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials…","severity":"MEDIUM","score":5.5,"vendor":"OpenStack","product":"Ironic Python Agent","kev":false,"epss":0.00147,"kevAdded":null}]}