CVE-2026-107193: Authorization Bypass Through User-Controlled Key in Red Hat Red Hat Satellite 6

The vulnerability in Red Hat Satellite 6's foreman package concerns permission filters used by the API. The API loads a filter by its identifier but does not apply search limits based on the caller's permissions. Consequently, a low-privileged user who is authorized to delete filters for a single role can delete filters associated with other unlocked roles. This unauthorized deletion results in those other roles losing the access permissions granted by the deleted filters. The issue is an authorization bypass due to insufficient permission checks on filter deletion.

An attacker with limited privileges who can delete filters for one role can escalate their impact by deleting filters belonging to other roles. This causes those other roles to lose access rights granted by the deleted filters, potentially disrupting legitimate access controls. The vulnerability does not directly disclose information or cause availability loss but impacts integrity by unauthorized modification of access permissions.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-107193 for current remediation guidance. Until an official fix is available, restrict filter deletion permissions to trusted users only to minimize risk.