A flaw was found in Katello. The Docker Tags repositories API endpoint resolves a DockerMetaTag with an unscoped find and returns associated repositories without intersecting Repository.readable. An authenticated user with viewproducts permission in one organization can enumerate repository metadata (names, product associations, content types, upstream URLs) for Docker tags belonging to other organizations by supplying the tag identifier and omitting the optional organization filter. Reported via PSIRTSUPT-25120.
Hi,
A security fix has been released in Katello, a content management plugin for Foreman.
CVE-2026-56097: Katello: SQL injection in Registry Proxy labels
An authenticated low-privilege user can inject SQL through Katello Registry Proxy label parameters because input is interpolated into database queries without sufficient sanitization. This can expose data across authorization boundaries.
Affected versions: Katello 4.13.0 through 4.21.1.1, and 5.0.0 CVSS: 6.5 (Moderate) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Fixed versions: Katello 4.21.2 and 5.0.1 Credit: Guilherme Suckevicz
References: - Foreman Security: https://theforeman.org/security.html#2026-56097 - Redmine: https://projects.theforeman.org/issues/39843 - Fix: https://github.com/Katello/katello/pull/11887
Thanks, Ondrej Gajdusek Foreman Release Team
A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Content View Filter in another organization by supplying that filter's identifier. This can result in unauthorized disclosure of filter-rule information and unauthorized changes to unpublished Content View filter configuration.
A potential XSS issue within Foreman / Katello has been reported. It is possible to inject JavaScript code into the Description field of a User and save it. This code is then executed when opening certain pages (e.g., Host Collections).
The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secrettoken value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default secrettoken.