What’s Vulnerable › Products

foreman vulnerabilities

86 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your foreman version is affected

Latest foreman vulnerabilities

• CVE-2026-12542 — Foreman: command injection in foreman-tail (CVSS 7.8)
• CVE-2026-96659 — Foreman: excessive permissions for viewer role on preview (CVSS 9.1)
• CVE-2026-96658 — Foreman: foreman: arbitrary code execution via safemode sandbox bypass (CVSS 8.8)
• CVE-2026-12544 — Foreman: ssti and insecure deserialization in foreman-rake configuration (CVSS 7.7)
• CVE-2026-12541 — Foreman: command injection in foreman-rake database tasks (CVSS 8.2)
• CVE-2026-12540 — Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter (CVSS 8.2)
• CVE-2026-12423 — Foreman: unauthenticated information disclosure via provisioning token validation flaw (CVSS 7.5)
• CVE-2026-81658 — Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup (CVSS 6.5)
• CVE-2026-5142 — Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass (CVSS 6.5)
• CVE-2026-5138 — Foreman: foreman: information disclosure via improper validation of nested request parameters (CVSS 4.3)
• CVE-2026-5135 — Foreman: foreman: unauthorized modification of host configurations via broken access control (CVSS 6.5)
• CVE-2026-5136 — Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation (CVSS 8.8)
• CVE-2026-13316 — Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config (CVSS 4.4)
• CVE-2026-9073 — Foreman-mcp-server: mcp server: insecure sensitive http header sanitization (CVSS 6.2)
• CVE-2026-12112 — Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse (CVSS 7.8)
• CVE-2026-1961 — Forman: foreman: remote code execution via command injection in websocket proxy (CVSS 8.8)
• CVE-2025-9572 — Foreman: satellite: graphql api permission bypass leads to information disclosure (CVSS 6.5)
• CVE-2024-7700 — Foreman: command injection in "host init config" template via "install packages" field on foreman (CVSS 6.5)
• CVE-2023-4886 — Foreman: world readable file containing secrets (CVSS 4.4)
• CVE-2022-3874 — Os command injection via ct_command and fcct_command (CVSS 9.1)
• CVE-2023-0462 — Arbitrary code execution through yaml global parameters (CVSS 9.1)
• CVE-2023-0118 — Foreman: arbitrary code execution through templates (CVSS 9.1)
• CVE-2021-20260 — (CVSS 7.8)
• CVE-2021-3590 — (CVSS 8.8)
• CVE-2020-10710 — (CVSS 4.4)