Vulnerability Description
A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including administrative roles, to a user group and then add themselves as a member. Successful exploitation of this vulnerability leads to full privilege escalation, granting the attacker administrator-level access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Satellite | >= 6.16, < 6.16.10 |
| Redhat | Enterprise Linux | 8.0 |
| Theforeman | Foreman | < 3.18.2 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/errata/RHSA-2026:34365Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:34366Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:34367Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:34368Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-5136Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2452970Issue TrackingVendor Advisory
FAQ
What is CVE-2026-5136?
CVE-2026-5136 is a vulnerability with a CVSS score of 8.8 (HIGH). A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup managem...
How severe is CVE-2026-5136?
CVE-2026-5136 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-5136?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Satellite, Redhat Enterprise Linux, Theforeman Foreman.