CVE-2025-9572: Foreman: satellite: graphql api permission bypass leads to information disclosure
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.
Other sources
The GraphQL /api/graphql endpoint returns all locations regardless of the requesting user's permissions, while the REST API /api/v2/locations correctly filters locations based on user access rights.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9572?
CVE-2025-9572 is classified as a high severity vulnerability due to the potential for unauthorized access to sensitive metadata.
How do I fix CVE-2025-9572?
To fix CVE-2025-9572, update your Foreman installation to the latest version that addresses the issue.
What type of vulnerability is CVE-2025-9572?
CVE-2025-9572 is an authorization flaw that allows low-privileged users to bypass permissions in the GraphQL API.
Which versions of Foreman are affected by CVE-2025-9572?
CVE-2025-9572 affects all versions of Foreman that utilize the vulnerable GraphQL API without proper access controls.
What impact does CVE-2025-9572 have on data security?
CVE-2025-9572 could lead to unauthorized information disclosure, allowing users to view sensitive metadata they are not permitted to access.