A vulnerability in Foreman's Api::V2::SshKeysController allows an attacker with create_ssh_keys permission to bypass authorization checks and inject a public SSH key into another user's account. This key injection propagates to hosts provisioned by the targeted user, potentially enabling unauthorized SSH access to those hosts.