CVE-2026-107360

Name of the Vulnerable Software and Affected Versions rubygem-safemode (affected versions not specified) Red Hat Satellite 6

Description A flaw exists in the rubygem-safemode Ruby sandbox where compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template renderer without Jail mediation. This can lead to destructive operations, such as host deletion, and the disclosure of non-allow-listed object state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.