The Red Hat Satellite MCP server container image (satellite/foreman-mcp-server-rhel9) is released as a Technology Preview. It supports advanced reporting and AI-based data analysis for Satellite inventory. The associated vulnerability CVE-2025-68158 is noted in the advisory, but no patch or fix is currently available. The advisory does not provide detailed technical vulnerability information or exploitation details. The product is not a cloud service, and no known exploits are reported in the wild. The advisory references additional CVEs (CVE-2026-9073, CVE-2026-12112) but does not specify fixes for any.

The vulnerability affects the MCP server container image used with Red Hat Satellite 6.18, potentially impacting the confidentiality, integrity, or availability of reporting and data analysis functions. The severity is rated high by the source, but no specific impact scenarios or exploitation methods are detailed. No known exploits in the wild have been reported. The lack of an official fix means the vulnerability may pose a risk if exploited, particularly in environments relying on the MCP server for critical reporting.

No official fix or patch is currently available for this vulnerability. The advisory indicates the container image is provided as a Technology Preview, suggesting it may not be intended for production use. Users should consult the Red Hat Satellite documentation for MCP integration guidance and monitor Red Hat Product Security advisories for updates. Until a fix is released, cautious use of the MCP server container image is advised, especially in sensitive environments.