CVE-2026-81668

Name of the Vulnerable Software and Affected Versions Katello (affected versions not specified)

Description An authorization flaw exists in the Content View Filter Rules API. An authenticated user with low privileges and Content View permissions in one organization can access and modify filter rules of a Content View Filter in a different organization by providing the identifier of that filter. This allows for the unauthorized disclosure of filter-rule information and unauthorized modifications to unpublished Content View filter configurations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.