CVE-2025-10622: Foreman: os command injection via ct_location and fcct_location parameters
A command injection flaw was found in Red Hat Satellite 6.16.5.2 (Foreman 3.12.0.8-1). Although a whitelist for CoreOS Transpiler Command and Fedora CoreOS Transpiler Command is implemented, the whitelist is only enforced on the client-side and is not validated on the server-side. This flaw allows an authenticated user with editsettings permissions to modify these parameters to achieve arbitrary command execution on underlying operating system and bypass safe mode rendering.
Other sources
A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with editsettings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10622?
CVE-2025-10622 is classified as a high severity vulnerability due to its command injection potential.
How do I fix CVE-2025-10622?
To fix CVE-2025-10622, update Red Hat Satellite and Foreman to the latest patched versions that address this vulnerability.
What systems are affected by CVE-2025-10622?
CVE-2025-10622 affects Red Hat Satellite 6.16.5.2 and Foreman 3.12.0.8-1.
What kind of attacks can CVE-2025-10622 enable?
CVE-2025-10622 can enable remote attackers to execute arbitrary commands on the server through improper input validation.
Is there a workaround for CVE-2025-10622 until a patch is applied?
There is no known workaround for CVE-2025-10622, and it is recommended to apply the security updates as soon as possible.