CVE-2025-10622 — Foreman: os command injection via ct_location and fcct_location parameters
A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution …
Published: 2025-11-05 · CVSS: 8.0 · CVSS 3.1
A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7