high8.0
CVE-2026-1961
A flaw was found in Foreman.
Impact
A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Satellite | from 6.16 before 6.16.7 from 6.17 before 6.17.7 from 6.18 before 6.18.4 Version 6.0 |
| Theforeman | Foreman | before 3.16.3 from 3.17.0 before 3.17.2 from 3.18.0 before 3.18.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2026:5968
- https://access.redhat.com/errata/RHSA-2026:5970
- https://access.redhat.com/errata/RHSA-2026:5971
- https://access.redhat.com/security/cve/CVE-2026-1961
- https://bugzilla.redhat.com/show_bug.cgi?id=2437036
- http://www.openwall.com/lists/oss-security/2026/03/27/3
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1961.json