CVE-2025-9572

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-863

Affected software

Vendor	Product	Versions
The Foreman	Foreman	>= 1.22.0, < 3.16.2
Red Hat	Red Hat Satellite 6.15 for RHEL 8	—
Red Hat	Red Hat Satellite 6.15 for RHEL 8	—
Red Hat	Red Hat Satellite 6.16 for RHEL 8	—
Red Hat	Red Hat Satellite 6.16 for RHEL 8	—
Red Hat	Red Hat Satellite 6.16 for RHEL 9	—
Red Hat	Red Hat Satellite 6.16 for RHEL 9	—
Red Hat	Red Hat Satellite 6.17 for RHEL 9	—
Red Hat	Red Hat Satellite 6.18 for RHEL 9	—
Red Hat	Red Hat Satellite 6.18 for RHEL 9	—
Red Hat	Red Hat Satellite 6.18 for RHEL 9	—

References

https://access.redhat.com/errata/RHSA-2025:21886Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:21893Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:21894Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:21897Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-9572Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2391715Issue Tracking
https://theforeman.org/security.html#2025-9572Vendor Advisory

Timeline

Published: Feb 27, 2026
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-95738.6The ns_backup extension through 13.0.2 for TYPO3 allows command injection.CVE-2025-957410.0Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects . All firmware ver CVE-2025-95758.8A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2 CVE-2025-95767.0A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688. Impacted is an unknown function of the file /etc/shadow of the component CVE-2025-95777.0A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.samp CVE-2025-95787.8Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windo CVE-2025-95798.8A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/set_hidessid_cfg of CVE-2025-95808.8A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/set_blacklist of th CVE-2025-95819.8A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipula CVE-2025-95829.8A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of CVE-2025-95838.8A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmg CVE-2025-95848.8A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt.