CVE-2026-12544

A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution chain that allows for both Server-Side Template Injection (SSTI) and insecure deserialization. This vulnerability can lead to remote code execution, total infrastructure compromise and supply chain risk.

CVSS 3.1

7.7CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-25)

CWE

CWE-502

Published

2026-10-01

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• redhat:satellite
• theforeman:foreman

References

• https://access.redhat.com/errata/RHSA-2026:74503
• https://access.redhat.com/errata/RHSA-2026:74504
• https://access.redhat.com/errata/RHSA-2026:74505
• https://access.redhat.com/errata/RHSA-2026:74506
• https://access.redhat.com/security/cve/CVE-2026-12544

Check your stackJSON