A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not sanitized or quoted, a local attacker can inject shell metacharacters (e.g., ;, &, |) to execute arbitrary system commands.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:74503 | Vendor Advisory |
| https://access.redhat.com/errata/RHSA-2026:74504 | Vendor Advisory |
| https://access.redhat.com/errata/RHSA-2026:74505 | Vendor Advisory |
| https://access.redhat.com/errata/RHSA-2026:74506 | Vendor Advisory |
| https://access.redhat.com/security/cve/CVE-2026-12542 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2489971 | Issue Tracking Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2026/10/07/7 | Mailing List Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
|
History
16 Oct 2026, 13:19
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Redhat satellite
Redhat Redhat enterprise Linux Theforeman Theforeman foreman |
|
| CPE | cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:a:theforeman:foreman:5.0.0:*:*:*:*:*:*:* |
|
| References | () https://access.redhat.com/errata/RHSA-2026:74503 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:74504 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:74505 - Vendor Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2026:74506 - Vendor Advisory | |
| References | () https://access.redhat.com/security/cve/CVE-2026-12542 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2489971 - Issue Tracking, Vendor Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2026/10/07/7 - Mailing List, Patch, Third Party Advisory |
07 Oct 2026, 07:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Oct 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Oct 2026, 00:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Oct 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-01 18:17
Updated : 2026-10-16 13:19
NVD link : CVE-2026-12542
Mitre link : CVE-2026-12542
CVE.ORG link : CVE-2026-12542
JSON object : View
Products Affected
redhat
- satellite
- enterprise_linux
theforeman
- foreman
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')