CVE-2026-79654

Name of the Vulnerable Software and Affected Versions Katello (affected versions not specified)

Description An authorization flaw exists in the Content View History API. An authenticated user with permissions to view Content Views within one organization can access the lifecycle history of a Content View from a different organization by providing its identifier to the affected API endpoint. This may lead to the unauthorized disclosure of lifecycle information, such as timestamps, associated users, and publication or promotion events.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.