CVE-2026-12112
Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse
Description
A flaw was found in the foreman-mcp-server. A session management vulnerability in the MCP Server allows unauthenticated attackers to hijack active administrative sessions due to an improper cache of authenticated client connections, by trusting a non-secret session ID without re-validating authentication tokens and by logging all newly created session IDs to standard logs. This issue can result in privilege escalation and infrastructure-wide code execution.
INFO
Published Date :
June 23, 2026, 7:40 p.m.
Last Modified :
June 23, 2026, 7:40 p.m.
Remotely Exploit :
No
Source :
redhat
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | 53f830b8-0a3f-465b-8143-3b8a9948e749 |
Solution
- Re-validate authentication tokens for all session requests.
- Ensure session IDs are not logged to standard output.
- Implement stricter session validation checks.
- Apply vendor patches for foreman-mcp-server.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-12112 vulnerability anywhere in the article.