Malicious Image Execution in OpenStack Ironic Python Agent

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

Casky was already ahead

This CVE exploits attack patterns that Casky's 419matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2026-43003 affects OpenStack Ironic Python Agent versions 1.0.0 through 11.5.0, where the agent executes grub-install commands from within a chroot environment of a deployed partition image without proper validation. This creates a critical code execution vulnerability—an attacker who can control or inject a malicious disk image during the deployment process can execute arbitrary code with the privileges of the IPA service. This threatens organizations using OpenStack for infrastructure-as-a-service deployments, particularly those managing bare-metal provisioning at scale. The vulnerability bridges the gap between image supply-chain compromise and runtime code execution, making it especially dangerous in multi-tenant or compromised image repository scenarios.

Casky's 419 matched skills detect the attack patterns underlying this vulnerability by mapping across MITRE ATT&CK techniques TA0001 (Initial Access—malicious image delivery), TA0043 (Reconnaissance—identifying deployment workflows), and TA0002 (Execution—code execution via chroot escape). Practitioners using Casky would identify suspicious patterns such as: unexpected chroot environment spawning during image deployment, grub-install invocations with non-standard arguments, child processes launched from within container/chroot contexts with elevated privileges, and file modifications outside expected deployment directories. Claude's extended reasoning capabilities correlate these behavioral indicators to reveal the attack chain—from image injection through privilege escalation—enabling security teams to distinguish legitimate provisioning activity from exploitation attempts and implement targeted detection rules before systems are compromised.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

419 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-43003.

analyzing-android-malware-with-apktool

malware analysis · medium

Run

analyzing-apt-group-with-mitre-navigator

threat intelligence · low

Run

analyzing-bootkit-and-rootkit-samples

malware analysis · medium

Run

MITRE ATT&CK Techniques

TA0001 TA0043 TA0002

Investigate the attack patterns behind CVE-2026-43003

Casky has 419 skills that investigate the attack patterns behind CVE-2026-43003. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn