Red Hat Satellite Foreman Untrusted Exec via Misconfigured Cmd Whitelist
CVE-2025-10622 Published on November 5, 2025

Foreman: os command injection via ct_location and fcct_location parameters
A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2025-10622 is exploitable with network access, and requires user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Timeline

Reported to Red Hat.

Made public. 45 days later.

Weakness Type

What is a Shell injection Vulnerability?

The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

CVE-2025-10622 has been classified to as a Shell injection vulnerability or weakness.


Products Associated with CVE-2025-10622

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2025-10622 are published in these products:

Red Hat Satellite Utils
 
Red Hat Satellite
 
Red Hat Satellite Maintenance
 
Red Hat Satellite Capsule
 

Affected Versions

The Foreman Foreman: Red Hat Satellite 6.15 for RHEL 8: Red Hat Satellite 6.16 for RHEL 8: Red Hat Satellite 6.16 for RHEL 9: Red Hat Satellite 6.17 for RHEL 9: Red Hat Satellite 6.18 for RHEL 9: Red Hat Satellite 6:

Exploit Probability

EPSS
0.11%
Percentile
29.90%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.