Medium severity · published Feb 27, 2026
CVE-2025-9572
Foreman: satellite: graphql api permission bypass leads to information disclosure
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
Foreman · The Foreman
1.22.0 before 3.16.2 · source: vendor, NVD
RH
Red Hat Satellite 6.15 for RHEL 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Satellite 6.16 for RHEL 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Satellite 6.16 for RHEL 9 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Satellite 6.17 for RHEL 9 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Satellite 6.18 for RHEL 9 · Red Hat
All versions, or not specified · source: vendor
EL
Enterprise Linux · Redhat
9.0 · source: NVD
SA
Satellite · Redhat
6.15; 6.16; 6.17; 6.18 · source: NVD
SC
Satellite Capsule · Redhat
6.15; 6.16; 6.17; 6.18 · source: NVD
Affected product
RH
Red Hat Satellite 6.15 for RHEL 8
Red Hat
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-9572
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-9572
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:21886
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:21893
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:21894
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:21897
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-9572
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2391715
More from Red Hat Satellite 6.15 for RHEL 8
9.8
CVE-2024-7923
Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
9.8
CVE-2024-7012
Puppet-foreman: an authentication bypass vulnerability exists in foreman
8.0
CVE-2025-10622
Foreman: os command injection via ct_location and fcct_location parameters