CVE-2026-5142

Name of the Vulnerable Software and Affected Versions foreman (affected versions not specified)

Description Authenticated users with 'view keypairs' permission can bypass taxonomy scoping, which is a mechanism used to restrict access to resources based on organizational boundaries. This allows them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs, leading to cross-tenant data exposure in multi-tenant deployments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.