Medium · published October 1, 2026
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not sanitized or quoted, a local attacker can inject shell metacharacters (e.g., ;, &, |) to execute arbitrary system commands.
| Product | Versions | Fixed in |
|---|---|---|
| redhat/satellite | ≥ 6.16, < 6.16.4 | 6.16.4 |
| redhat/satellite | ≥ 6.17, < 6.17.12 | 6.17.12 |
| redhat/satellite | ≥ 6.19, < 6.19.5 | 6.19.5 |
| theforeman/foreman | ≥ 1.5.0, ≤ 3.19.1 | — |
| theforeman/foreman | all versions | — |
| redhat/satellite | ≥ 6.18, < 6.18.10 | 6.18.10 |
| redhat/satellite | all versions | — |