By vendor

Theforeman vulnerabilities

Known CVEs affecting Theforeman products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-12112HIGH 7.8

  A vulnerability in the foreman-mcp-server, used by Red Hat Satellite and The Foreman, allows attackers with local access to steal and reuse administrative session credentials. The flaw stems from the server caching authenticated connections without properly validating them later, and it logs session identifiers in plaintext to standard output—making them discoverable. An attacker who gains local system access can read these logs, hijack an active administrator's session, and execute commands with full administrative privileges.

• CVE-2026-9073MEDIUM 6.2

  Foreman-mcp-server contains two logging flaws that can expose authentication secrets. Session identifiers are logged as informational messages, and when debug logging is enabled, HTTP headers containing authorization tokens and API keys are not properly sanitized before being written to logs. These plaintext credentials in container logs create a confidentiality risk, especially if logs are shipped to centralized logging systems where they may be accessed by additional parties.