Foreman vulnerabilities
We track 3 vulnerabilities in Foreman products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2025.
Latest Foreman vulnerabilities
- 8.0 High severity
Foreman: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of comma
- 9.1 Critical severity
foreman: Improper Neutralization of Special Elements used in an OS Command
A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command exec
- 9.1 Critical severity
foreman: Improper Control of Generation of Code
An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.