Signal is active with 1 mentions in latest observed window
Immediate actions
Patch redhat enterprise_linux systems immediately
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including administrative roles, to a user group and then add themselves as a member. Successful exploitation of this vulnerability leads to full privilege escalation, granting the attacker administrator-level access.
Foreman: 4 CVEs fixed in 3.18.2, 3.19.1 https://www.openwall.com/lists/oss-security/2026/07/07/7
CVE-2026-5136: Privilege escalation via usergroup role assignment
CVE-2026-5142: Private SSH key disclosure
CVE-2026-5135: Unauthorized modification of host configuration
CVE-2026-5138: Information disclosure
Post summary
The post announces that four Foreman CVEs have been patched in version 3.18.2/3.19.1, providing brief vulnerability descriptions but no evidence of exploitation or PoC.
🚨 HIGH - Foreman Usergroup role assignment privilege escalation (CVE-2026-5136)
Foreman’s Usergroup model fails to properly validate role assignments against the calling user’s permissions, allowing unauthorized role changes within the usergroup management component. The root cause is improper authorization / access control validation (broken permission checks) when attaching roles to user groups. An authenticated attacker who has usergroup management permissions can assign arbitrary roles (including admin) to a group and then add themselves to that group to inherit those elevated roles. If exploited, this results in full privilege escalation to administrator-level access, enabling complete takeover of Foreman-managed infrastructure and sensitive data.
👉 Affected: foreman, satellite-capsule:el8/foreman (versions affected per vendor advisory) | Upgrade to the vendor-fixed release once available (no fix version provided in report)
Post summary
The post announces a privilege‑escalation flaw in Foreman’s usergroup role assignment, explains how the vulnerability works, and advises upgrading to the vendor‑fixed release.
