CVE-2026-5135

Name of the Vulnerable Software and Affected Versions Foreman (affected versions not specified)

Description A broken access control issue allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is performed by modifying the match field through nested host attributes, which bypasses authorization checks. This can lead to the unauthorized modification of managed host configurations across different location and organizational boundaries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.