CVE-2026-12544

Published Oct 1, 2026

Last updated 14 days ago

Overview

Description
A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution chain that allows for both Server-Side Template Injection (SSTI) and insecure deserialization. This vulnerability can lead to remote code execution, total infrastructure compromise and supply chain risk.
Source
secalert@redhat.com
NVD status
Analyzed
Products
satellite, foreman

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.7
Impact score
6
Exploitability score
1.1
Vector string
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Severity
HIGH

Weaknesses

secalert@redhat.com
CWE-502

Social media

Hype score
Not currently trending

Configurations