High-Risk Command Injection Vulnerabilities in Red Hat Satellite

• •Two critical command injection vulnerabilities found in Red Hat Satellite's Foreman.
• •Attackers with sudo access can execute arbitrary code through flawed tasks.
• •Immediate patching is required as no practical workarounds exist.

Two command injection vulnerabilities (CVE-2026-12540 and CVE-2026-12541) were discovered in Red Hat Satellite's Foreman component, affecting the foreman-rake tasks. These flaws allow attackers with sudo permissions to execute arbitrary code by injecting shell metacharacters into system commands. The vulnerabilities impact organizations using Red Hat Satellite for infrastructure management, particularly those with broad delegated access. Red Hat has classified both vulnerabilities as high-risk with a CVSS score of 8.2. No known exploitation has been reported in the wild, but immediate remediation is advised. Affected tasks include errors:fetch_log and db:dump/db:import_dump, which are crucial for log management and database operations. Patching is required as no practical workarounds are available. Administrators are urged to review sudo permissions and audit logs for suspicious activity.