CVE-2026-107193
Foreman: api filter lookup ignores a search-limited filter permission
- State
- Published
- Severity
- 6.5 Medium
- Published
- Oct 12, 2026
- Updated
- Oct 13, 2026
- Reserved
- Oct 7, 2026
Description
A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete filters for one role only. They can delete filters that belong to other unlocked roles. Those other roles then lose the access the deleted filters had granted.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | redhat |
Weaknesses
- CWE-639 Authorization Bypass Through User-Controlled Key
Affected Products
| Product | Versions |
|---|---|
Red Hat Satellite 6Red Hat |
References
- https://access.redhat.com/security/cve/CVE-2026-107193vdb-entry
- RHBZ#2547437issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.