CVE-2023-0118: Red Hat Satellite

Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days.

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.

Affected products

• Red Hat Satellite: from 6.13, before 6.13.3 (fixed in 6.13.3)
• Theforeman Foreman: any version

Published 2023-09-20. Last modified 2026-06-17.