CVE-2026-92893 is a vulnerability in the foreman_ansible plugin's Ansible inventory API where an authenticated user can bypass host visibility restrictions. The flaw arises because the host query does not enforce the caller's view_hosts permission filter, allowing unauthorized access to full Ansible inventory data, including hidden parameter values. This issue affects Red Hat Satellite 6.19 on RHEL 9. A security update has been released by Red Hat to enforce proper authorization when accessing Ansible inventory data.