This vulnerability in Red Hat Satellite 6 involves SSRF due to improper handling of HTTP parameters in foreman's http_proxies_controller and http_proxy files. Attackers can exploit this flaw to access and steal cloud metadata service data from AWS, GCP, and Azure environments. The CVSS 3.1 score is 4.4 (medium severity), with attack vector local, low attack complexity, high privileges required, no user interaction, unchanged scope, and high confidentiality impact. The product is a cloud service, and Red Hat provides patching and remediation server-side. The vendor advisory confirms the vulnerability and remediation availability but does not specify affected versions or detailed patch instructions.

Successful exploitation allows an attacker with local access and high privileges to perform SSRF attacks that can steal sensitive cloud metadata service information from AWS, GCP, and Azure environments. This compromises confidentiality but does not affect integrity or availability. The impact is limited to environments using the vulnerable foreman component within Red Hat Satellite 6 cloud service.

Red Hat manages remediation for this cloud-hosted service and has made a patch available. Users of Red Hat Satellite 6 cloud service should follow Red Hat's official advisory at https://access.redhat.com/security/cve/CVE-2026-13316 for patching and mitigation instructions. Since this is a cloud service, remediation is typically handled by Red Hat. Check the vendor advisory for the latest status and guidance.