A vulnerability in the foreman_remote_execution plugin's template invocations controller allows authenticated users to bypass permission filters and access job invocation details of other users within their organizations. This flaw enables enumeration of job invocation IDs and reading of live output, rendered scripts, and input values without proper authorization checks.