Foreman’s templating engine contains a flaw that allows an authenticated remote attacker with low‑level read permissions to manipulate the list of permitted methods. By doing so, the attacker can bypass the safemode sandbox isolation and execute arbitrary commands directly on the underlying server. This grants remote code execution and compromises the confidentiality, integrity, and availability of the affected system.

The vulnerability affects Red Hat Satellite 6.16 for RHEL 8 and RHEL 9, Red Hat Satellite 6.17, 6.18, and 6.19 for RHEL 9, and the corresponding Satellite Capsule and Satellite Utils components of those versions. It also impacts the Foreman application itself, including versions 3.19.0, 3.19.1, and 5.0.0, as well as the Enterprise Linux 8 and 9 platforms that run the affected Satellite packages.

The CVSS score of 8.8 classifies this as a high severity vulnerability, while the EPSS score of < 1% indicates a very low yet non‑zero probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, so no known active exploitation. The likely attack vector is an authenticated user modifying a template in the Foreman interface to insert the malicious delegated method. The flaw can be exploited with low privilege, resulting in potentially full system compromise.