Remote Code Execution Vulnerability in Foreman by Red Hat

CVE-2026-96658

What is CVE-2026-96658?

A security flaw identified in Foreman permits an authenticated attacker with minimal permissions to execute arbitrary commands on the server. This is achieved through a vulnerability in the templating engine's safemode sandbox, where improper handling of delegated methods allows the attacker to manipulate the allowed execution list. As a result, the attacker can append unauthorized functions and successfully carry out remote code execution, posing significant risks to the server's integrity.

References