CVE-2026-5142

EUVD-2026-41002
A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cross-tenant data exposure in multi-tenant deployments, potentially compromising sensitive information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 36.25%
Affected Products (NVD)
VendorProductVersion
redhatsatellite
6.18 ≤
𝑥
< 6.18.7
redhatsatellite
6.16 ≤
𝑥
< 6.16.10
redhatsatellite
6.17 ≤
𝑥
< 6.17.9
redhatsatellite
6.19 ≤
𝑥
< 6.19.2
theforemanforeman
𝑥
< 3.18.2
theforemanforeman
3.19.0 ≤
𝑥
< 3.19.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2026:34365
https://access.redhat.com/errata/RHSA-2026:34366
https://access.redhat.com/errata/RHSA-2026:34367
https://access.redhat.com/errata/RHSA-2026:34368
https://access.redhat.com/security/cve/CVE-2026-5142
https://bugzilla.redhat.com/show_bug.cgi?id=2452999