AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-5142

Red Hat Satellite 6: information disclosure

Red Hat

CVE-2026-5142 · Published Jul 1, 2026 · updated Jul 9, 2026

Medium6.5
No fix yet
Red Hat advisory

A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cross-tenant data exposure in multi-tenant deployments, potentially compromising sensitive information.

Affected versions

PackageAffectedFixed in
Red Hat Satellite 6
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-639

More Red Hat advisories

All Red Hat
Medium 6.5Jul 1Red Hat Satellite 6: improper access controlCVE-2026-5135no fix yetMedium 4.3Jul 1Red Hat Satellite 6: information disclosureCVE-2026-5138no fix yetMedium 6.5Jul 1Red Hat Enterprise Linux: null pointer dereferenceCVE-2026-14324no fix yetMedium 5.5Jul 1Red Hat Enterprise Linux: resource exhaustionCVE-2026-14330no fix yetCritical 9.1Jul 1Red Hat Feast Feature Server: denial of serviceCVE-2026-23537fixed in 0.59.0High 8.8Jul 1Red Hat Satellite 6: privilege escalationCVE-2026-5136no fix yet