CVE-2025-9572mediumCWE-863

CVE-2025-9572: medium-severity vulnerability in The Foreman Foreman

Foreman: satellite: graphql api permission bypass leads to information disclosure

Published · Updated

Follow this CVE+ Monitor Red Hat Satellite+ Monitor foreman

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 0.4%
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Affected products
Red Hat · Red Hat Satellite 6.15 for RHEL 8Red Hat · Red Hat Satellite 6.16 for RHEL 8Red Hat · Red Hat Satellite 6.16 for RHEL 9Red Hat · Red Hat Satellite 6.17 for RHEL 9Red Hat · Red Hat Satellite 6.18 for RHEL 9The Foreman · Foreman
Related CVEs — The Foreman Foreman

In the same product, most dangerous first.

CVE-2026-1961HIGHForman: foreman: remote code execution via command injection in websocket proxyEPSS 1.9%CVE-2026-12405HIGHRubygem-foreman_remote_execution: command injection in job invocations via effective_user parameterEPSS 1.6%CVE-2026-12541HIGHForeman: command injection in foreman-rake database tasksEPSS 1.2%CVE-2026-12540HIGHForeman: command injection in foreman-rake errors:fetch_log via request_id parameterEPSS 1.2%CVE-2026-12701CRITICALPulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexportEPSS 1.2%CVE-2023-5189MEDIUMHub: insecure galaxy-importer tarfile extractionEPSS 1.0%