CVE-2026-66138 | OpenStack Ironic Python Agent prior 10.2.3/11.2.1/11.5.1/11.6.0 ntp_server os command injection

A vulnerability identified as critical has been detected in OpenStack Ironic Python Agent. This impacts an unknown function. The manipulation of the argument ntp_server leads to os command injection.

This vulnerability is listed as CVE-2026-66138. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.