Foreman: os command injection via ct_location and fcct_location parameters

8 CVSS

Vulnerability Description

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-10622

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Red Hat would like to thank Michał Bartoszuk (stmcyber.pl) for reporting this issue.

References

More from The Foreman

View All →

CVE-2025-9572

Foreman: satellite: graphql api permission bypass leads to information disclosure

Medium 5

Affected Vendor

The Foreman

View all reports →

Affected Software

Foreman, Red Hat Satellite 6.15 for RHEL 8, Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9, Red Hat Satellite 6.17 for RHEL 9, Red Hat Satellite 6.18 for RHEL 9, Red Hat Satellite 6

Vulnerable Versions:

3.12.0, 0:3.9.1.13-1.el8sat, 0:3.12.0.11-1.el8sat, 0:3.12.0.11-1.el9sat, 0:3.14.0.10-1.el9sat, 0:3.16.0.4-1.el9sat