Foreman: satellite: graphql api permission bypass leads to information disclosure

5 CVSS

Vulnerability Description

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9572

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Red Hat would like to thank Ohad Levy (Redhat) for reporting this issue.

References

More from The Foreman

View All →

CVE-2025-10622

Foreman: os command injection via ct_location and fcct_location parameters

High 8

Affected Vendor

The Foreman

View all reports →

Affected Software

Foreman, Red Hat Satellite 6.15 for RHEL 8, Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9, Red Hat Satellite 6.17 for RHEL 9, Red Hat Satellite 6.18 for RHEL 9

Vulnerable Versions:

1.22.0, 0:3.9.1.14-1.el8sat, 0:6.15.5.7-1.el8sat, 0:3.12.0.12-1.el8sat, 0:6.16.5.6-1.el8sat, 0:3.12.0.12-1.el9sat, 0:6.16.5.6-1.el9sat, 0:3.14.0.11-1.el9sat, 0:3.16.0.7-1.el9sat, 0:4.18.0.4-1.el9sat, 0:6.18.1-1.el9sat