CVE-2026-12542
published 2026-10-01CVE-2026-12542: A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes…
PriorityP350high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.56%
45.7th percentile
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not sanitized or quoted, a local attacker can inject shell metacharacters (e.g., ;, &, |) to execute arbitrary system commands.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | satellite | — | — |
| redhat | satellite | >= 6.16 < 6.16.4 | 6.16.4 |
| redhat | satellite | >= 6.17 < 6.17.12 | 6.17.12 |
| redhat | satellite | >= 6.18 < 6.18.10 | 6.18.10 |
| redhat | satellite | >= 6.19 < 6.19.5 | 6.19.5 |
| satellite_el8 | foreman | — | — |
| theforeman | foreman | — | — |
| theforeman | foreman | 1.5.0 – 3.19.1 | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
foreman: command injection in foreman-tail
vendor_redhat·2026-10-01·CVSS 5.3
CVE-2026-12542 [MEDIUM] CWE-78 foreman: command injection in foreman-tail
foreman: command injection in foreman-tail
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not sanitized or quoted, a local attacker can inject shell metacharacters (e.g., ;, &, |) to execute arbitrary system commands.
Statement: Successful exploitation of this issue allows a local attacker to escape restricted shells and execute arbitrary commands on the Satellite server. Consequently, the attacker could access sensitive information that could lead to remote code execution (RCE) and lateral movement across the managed infrastructure.
Mitigation
GHSA
A flaw was found in Foreman.
ghsa_unreviewed·2026-10-01
CVE-2026-12542 [MEDIUM] CWE-78 A flaw was found in Foreman.
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not sanitized or quoted, a local attacker can inject shell metacharacters (e.g., ;, &, |) to execute arbitrary system commands.
No detection rules found.
No public exploits indexed.
https://access.redhat.com/errata/RHSA-2026:74503https://access.redhat.com/errata/RHSA-2026:74504https://access.redhat.com/errata/RHSA-2026:74505https://access.redhat.com/errata/RHSA-2026:74506https://access.redhat.com/security/cve/CVE-2026-12542https://bugzilla.redhat.com/show_bug.cgi?id=2489971http://www.openwall.com/lists/oss-security/2026/10/07/7
2026-10-01
Published