Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-12541

Foreman: command injection in foreman-rake database tasks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Satellite 6.16 for RHEL 8

Default version status: affected

  • 0:3.12.0.23-1.el8sat to < *unaffected

Red Hat Red Hat Satellite 6.16 for RHEL 9

Default version status: affected

  • 0:3.12.0.23-1.el9sat to < *unaffected

Red Hat Red Hat Satellite 6.17 for RHEL 9

Default version status: affected

  • 0:3.14.0.22-1.el9sat to < *unaffected

Red Hat Red Hat Satellite 6.18 for RHEL 9

Default version status: affected

  • 0:3.16.0.25-1.el9sat to < *unaffected

Red Hat Red Hat Satellite 6.19 for RHEL 9

Default version status: affected

  • 0:3.18.0.14-1.el9sat to < *unaffected

Red Hat Red Hat Satellite 6

Default version status: affected

References