CVE-2026-106471: Incorrect Authorization in Red Hat Red Hat Satellite 6

The vulnerability in Candlepin's authorization filter incorrectly grants access when any single @Verify-annotated parameter is accessible, instead of requiring access to every verified entity. This logic flaw enables a low-privilege authenticated attacker who can access the first referenced object to bypass authorization checks on other objects. When the attacker knows target resource identifiers, they can disclose consumer information and modify entitlements and subscription resources without proper authorization, including across organizational boundaries.

This vulnerability allows unauthorized disclosure of sensitive consumer information and unauthorized modification of entitlements and subscription resources. The impact includes potential cross-organization access and modification, which can compromise confidentiality and integrity of subscription management data. The CVSS score of 8.1 reflects high severity with network attack vector, low attack complexity, requiring low privileges but no user interaction, and high confidentiality and integrity impact.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-106471 for current remediation guidance. Until an official fix is available, restrict access to Candlepin interfaces to trusted users and monitor for suspicious activity related to entitlement and subscription modifications.