High 8.0Published Nov 5, 2025

CVE-2025-10622Foreman: os command injection via ct_location and fcct_location parameters

Updated under an hour ago (Oct 27, 2026, 5:00 PM ET)

Does this affect you?

It affects The Foreman Foreman and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for The Foreman Foreman

Exploited in the last 30 days

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

CVSS: 8.0 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness (CWE): CWE-78
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: redhat
NVD analysis: Deferred
Record last updated: Feb 26, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

The Foreman Foreman foreman:foreman (from the name)	from 3.12.0 before 3.16.1	CNA record
Red Hat Red Hat Satellite 6.15 for RHEL 8 redhat:satellite	from 0:3.9.1.13-1.el8sat not affected	CNA record
Red Hat Red Hat Satellite 6.15 for RHEL 8 redhat:satellite_capsule	from 0:3.9.1.13-1.el8sat not affected	CNA record
Red Hat Red Hat Satellite 6.15 for RHEL 8 redhat:satellite_utils	from 0:3.9.1.13-1.el8sat not affected	CNA record
Red Hat Red Hat Satellite 6.17 for RHEL 9 redhat:satellite_maintenance	from 0:3.14.0.10-1.el9sat not affected	CNA record

References

References

https://access.redhat.com/errata/RHSA-2025:19721	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2025:19832	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2025:19855	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2025:19856	vendor-advisory, x-refsource-redhat
https://access.redhat.com/security/cve/CVE-2025-10622	vdb-entry, x-refsource-redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2396020	issue-tracking, x-refsource-redhat
https://theforeman.org/security.html#2025-10622

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.