CVE-2025-9572
Foreman: satellite: graphql api permission bypass leads to information disclosure
CVSS Score
5.0
EPSS Score
0.0%
EPSS Percentile
1th
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.
| CWE | CWE-863 |
| Vendor | the foreman |
| Product | foreman |
| Published | Feb 27, 2026 |
| Last Updated | Mar 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for the foreman foreman
Be the first to know when new medium vulnerabilities affecting the foreman foreman are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
The Foreman / Foreman
1.22.0 < 3.16.2
Red Hat / Red Hat Satellite 6.15 for RHEL 8
All versions affected Red Hat / Red Hat Satellite 6.15 for RHEL 8
All versions affected Red Hat / Red Hat Satellite 6.16 for RHEL 8
All versions affected Red Hat / Red Hat Satellite 6.16 for RHEL 8
All versions affected Red Hat / Red Hat Satellite 6.16 for RHEL 9
All versions affected Red Hat / Red Hat Satellite 6.16 for RHEL 9
All versions affected Red Hat / Red Hat Satellite 6.17 for RHEL 9
All versions affected Red Hat / Red Hat Satellite 6.18 for RHEL 9
All versions affected Red Hat / Red Hat Satellite 6.18 for RHEL 9
All versions affected Red Hat / Red Hat Satellite 6.18 for RHEL 9
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2025:21886 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:21893 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:21894 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:21897 access.redhat.com: https://access.redhat.com/security/cve/CVE-2025-9572 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2391715 theforeman.org: https://theforeman.org/security.html#2025-9572
Credits
Red Hat would like to thank Ohad Levy (Redhat) for reporting this issue.