Permission Filter Flaw in Foreman Package from Red Hat

CVE-2026-107193

What is CVE-2026-107193?

A security flaw exists in the permission filters of the Foreman package, where the API retrieves filters by identifier but does not impose necessary search limits based on user permissions. This lack of restriction enables a low-privileged network attacker, who already has the ability to delete filters for a specific role, to remove filters associated with other unlocked roles. As a result, those roles can lose access rights previously granted through the deleted filters, leading to potential unauthorized access issues.

References