Authentication Bypass Vulnerability in Red Hat Satellite

CVE-2026-12423

What is CVE-2026-12423?

An authentication bypass vulnerability exists in the Red Hat Satellite's /unattended/provision API endpoint due to a flaw in the host_verifier.rb logic. This issue allows unauthorized access to the kickstart template, as the system mistakenly validates a provisioning token's database presence instead of verifying the token included in the HTTP request. Consequently, even without a token, an attacker can exploit an active provisioning session that contains a valid token in the database, thus bypassing authentication checks.

References