CVE-2026-96658

Red Hat statement

Red Hat Product Security rates this vulnerability as having a Critical security impact because an authenticated user with minimal read permissions can achieve arbitrary remote code execution on the underlying Satellite server. In Red Hat Satellite deployments, Foreman relies on a restricted sandbox to safely render templates. Flaws in this evaluation mechanism allow adversaries with baseline view privileges to bypass isolation and execute unauthorized commands directly on the host system.