CVE-2026-12544

Отчет

• Indirect triggering and remote code execution: foreman-rake exposes underlying execution primitives that higher-level orchestration tools (like foreman-maintain or foreman-installer) rely on to interact with the application. Because these tools implicitly pass commands down, the vulnerability can be triggered indirectly during routine administrative operations, resulting in remote code execution in a high-trust context (often foreman or root).
• Total infrastructure compromise: compromising the management plane (Satellite server) allows an attacker to pivot and execute arbitrary code across all Satellite managed hosts.
• Supply chain risk: while direct local exploitation requires prior root access, this flaw presents a critical supply chain risk. An adversary could distribute malicious plugins or compromised configuration files through public repositories (e.g., RubyGems, GitHub). Note: The CVSS vector and severity are based on this supply chain attack vector.

Меры по смягчению последствий

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.