CVE-2025-10622

Name of the Vulnerable Software and Affected Versions Red Hat Satellite (Foreman component) (affected versions not specified)

Description A flaw exists in Red Hat Satellite’s Foreman component that could allow an authenticated user with edit settings permissions to execute arbitrary commands on the operating system. This is due to inadequate server-side validation of command whitelisting. The issue involves the ct location and fcct location parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.