Metal3

2 CVEs across 2 Metal3 products. Browse Metal3 vulnerabilities, severities, and proof-of-concept exploits.

Metal3 products with known CVEs

ProductCVEs
Ip-Address-Manager1
Ironic-Image1
Metal3 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-47190Medium4.42026-06-12IPAM is the IP address Manager for Cluster API Provider Metal3. Prior to versions 1.11.7, 1.12.4, and 1.13.0, the IPAM controller's ClusterRole granted full CR…
CVE-2023-40585High7.32023-08-25ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is not deployed with TLS and it does not…