CVEvulnerability
CVE-2026-5136
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-07-01
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-266
Description
A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including administrative roles, to a user group and then add themselves as a member. Successful exploitation of this vulnerability leads to full privilege escalation, granting the attacker administrator-level access.
Affected configurations
• redhat satellite (>= 6.16 < 6.16.10)
• redhat satellite (>= 6.17 < 6.17.9)
• redhat satellite (>= 6.18 < 6.18.7)
• redhat satellite (>= 6.19 < 6.19.2)
• theforeman foreman (< 3.18.2)
• theforeman foreman (>= 3.19.0 < 3.19.1)
Related
Weakness · CWE (1)
- CWE-266 Incorrect Privilege Assignment weakness
References
- https://access.redhat.com/errata/RHSA-2026:34365 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:34366 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:34367 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:34368 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-5136 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2452970 Issue Tracking, Vendor Advisory