Every CVE Search/ Get API key

CVE-2025-10622

Foreman: os command injection via ct_location and fcct_location parameters

8.0 HighFix available

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.73%Up 0.7 points since Nov 5, 2025
90%50%10%1%

What each source reports

CVE List Score used 8.0

Foreman: os command injection via ct_location and fcct_location parameters

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

Record
CVE-2025-10622
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
EUVDEUVD-2025-37786 8.0

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

Record
EUVD-2025-37786
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-f5h4-c4jw-c4gm 8.0

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an...

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

Record
GHSA-f5h4-c4jw-c4gm
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-78, CWE-602
Updated
2026-11-02
NVD 8.0

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

Record
CVE-2025-10622
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
OSV 8.0

Foreman: os command injection via ct_location and fcct_location parameters

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

Record
CVE-2025-10622
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
OSVRHSA-2025:19721 8.0

Red Hat Security Advisory: Satellite 6.18.0 new version release

Record
RHSA-2025:19721
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19832 8.0

Red Hat Security Advisory: Satellite 6.17.6 Async Update

Record
RHSA-2025:19832
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19855 8.0

Red Hat Security Advisory: Satellite 6.16.5.5 Async Update

Record
RHSA-2025:19855
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:19856 8.0

Red Hat Security Advisory: Satellite 6.15.5.6 Async Update

Record
RHSA-2025:19856
CVSS 3.1
8.0 HighCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
foreman
Red Hat:satellite_capsule:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-debug
Red Hat:satellite_capsule:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-pcp
Red Hat:satellite_capsule:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman
Red Hat:satellite_utils:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-cli
Red Hat:satellite_utils:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-cli
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-debug
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-ec2
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
Show 97 moreShow less
Affected packages
PackageAffectedFixed
foreman-journald
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-libvirt
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-openstack
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-pcp
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-postgresql
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-redis
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-service
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-telemetry
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman-vmware
Red Hat:satellite:6.18::el9
 before 0:3.16.0.4-1.el9sat
0:3.16.0.4-1.el9sat
foreman
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-debug
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-pcp
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman
Red Hat:satellite_utils:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-cli
Red Hat:satellite_utils:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-cli
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-debug
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-ec2
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-journald
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-libvirt
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-openstack
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-ovirt
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-pcp
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-postgresql
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-redis
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-service
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-telemetry
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
foreman-vmware
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:3.14.0.10-1.el9sat
0:3.14.0.10-1.el9sat
rubygem-rack
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 3 CVEs
 before 0:2.2.20-1.el9sat
0:2.2.20-1.el9sat
rubygem-rack
Red Hat:satellite:6.17::el9
From an advisory covering 3 CVEs
 before 0:2.2.20-1.el9sat
0:2.2.20-1.el9sat
foreman
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-pcp
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman
Red Hat:satellite_utils:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-cli
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-debug
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-ec2
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-journald
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-libvirt
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-openstack
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-ovirt
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-pcp
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-postgresql
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-redis
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-service
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-telemetry
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman-vmware
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el8sat
0:3.12.0.11-1.el8sat
foreman
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-debug
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-pcp
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman
Red Hat:satellite_utils:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-cli
Red Hat:satellite_utils:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-cli
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-debug
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-ec2
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-journald
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-libvirt
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-openstack
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-ovirt
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-pcp
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-postgresql
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-redis
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-service
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-telemetry
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
foreman-vmware
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:3.12.0.11-1.el9sat
0:3.12.0.11-1.el9sat
rubygem-rack
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 3 CVEs
 before 0:2.2.20-1.el8sat
0:2.2.20-1.el8sat
rubygem-rack
Red Hat:satellite:6.16::el8
From an advisory covering 3 CVEs
 before 0:2.2.20-1.el8sat
0:2.2.20-1.el8sat
rubygem-rack
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 3 CVEs
 before 0:2.2.20-1.el9sat
0:2.2.20-1.el9sat
rubygem-rack
Red Hat:satellite:6.16::el9
From an advisory covering 3 CVEs
 before 0:2.2.20-1.el9sat
0:2.2.20-1.el9sat
foreman
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-pcp
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman
Red Hat:satellite_utils:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-cli
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-debug
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-ec2
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-journald
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-libvirt
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-openstack
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-ovirt
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-pcp
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-postgresql
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-redis
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-service
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-telemetry
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
foreman-vmware
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:3.9.1.13-1.el8sat
0:3.9.1.13-1.el8sat
rubygem-rack
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 3 CVEs
 before 0:2.2.20-1.el8sat
0:2.2.20-1.el8sat
rubygem-rack
Red Hat:satellite:6.15::el8
From an advisory covering 3 CVEs
 before 0:2.2.20-1.el8sat
0:2.2.20-1.el8sat

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-10622 is a high vulnerability (CVSS 8.0) in The Foreman Foreman, published November 5, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.73%, the 54th percentile. Fixed in foreman 0:3.16.0.4-1.el9sat.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 125 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open