CVE-2026-5142
Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass
Description
A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cross-tenant data exposure in multi-tenant deployments, potentially compromising sensitive information.
INFO
Published Date :
July 1, 2026, 2:07 p.m.
Last Modified :
July 1, 2026, 2:07 p.m.
Remotely Exploit :
Yes !
Source :
redhat
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | 53f830b8-0a3f-465b-8143-3b8a9948e749 | ||||
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Review and restrict user permissions for viewing key pairs.
- Implement strict access control for SSH key management.
- Ensure taxonomy scoping is enforced for all key pair access.
- Update the software to the latest secure version.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-5142 vulnerability anywhere in the article.