Red Hat Satellite 6.15.5.2 includes security fixes for three notable vulnerabilities: CVE-2024-56201, a sandbox breakout in the python-jinja2 templating engine caused by malicious filenames; CVE-2025-27407, a remote code execution vulnerability when loading a crafted GraphQL schema in rubygem-graphql; and CVE-2025-27610, a local file inclusion vulnerability in rubygem-rack's Rack::Static component. These vulnerabilities could allow attackers to execute arbitrary code or access unauthorized files if exploited. The update is rated as Important by Red Hat Product Security and applies to Red Hat Satellite 6.15 on RHEL 8 systems.

Successful exploitation of these vulnerabilities could lead to remote code execution, sandbox escape, or unauthorized local file inclusion on affected Red Hat Satellite systems. This could compromise system integrity and confidentiality. However, there are no known exploits in the wild at the time of this advisory. The vulnerabilities affect critical components used in system management and provisioning.

Red Hat has released updated packages that fix these vulnerabilities. Users of Red Hat Satellite 6.15 for RHEL 8 are strongly advised to apply the Red Hat Satellite 6.15.5.2 update and ensure all previously released errata are applied before updating. Detailed update instructions are available in the Red Hat Satellite documentation. No alternative mitigations are indicated, and patching is the recommended remediation.