OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.Referenceshttps://bugs.launchpad.net/ironic/+bug/2166507https://security.openstack.org/ossa/OSSA-2026-047.html
