Authorization Flaw in Katello Content View Filter Affects Red Hat
CVE-2026-81668

5.4MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Satellite 6
Vendor
CVE Published:
27 August 2026

What is CVE-2026-81668?

A security vulnerability has been identified in Katello's Content View Filter Rules API, which fails to adequately enforce authorization for parent Content View Filters. This issue allows authenticated, low-privileged users with Content View permissions in one organization to potentially access and modify filter rules of another organization's Content View Filter using its identifier. Such unauthorized actions could lead to unintended disclosure of sensitive filter-rule information and unauthorized changes to unpublished Content View filter configurations, posing security risks to data integrity across organizations.

References

https://access.redhat.com/security/cve/CVE-2026-81668
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2524928
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Arpit Jain, Independent Security Researcher (Github: arpitjain099) for reporting this issue.
.