BaseFortify

Publication date: 2025-11-05

Last updated on: 2026-02-06

Assigner: Red Hat, Inc.

Description

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-05

Last Modified

2026-02-06

Generated

2026-07-06

AI Q&A

2025-11-05

EPSS Evaluated

2026-07-05

NVD

CVE-2025-10622

Affected Vendors & Products

Vendor	Product	Version / Range
red_hat	satellite	3.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-602	The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability in Red Hat Satellite's Foreman component allows an authenticated user with edit_settings permissions to execute arbitrary commands on the underlying operating system. This happens because the server does not properly validate commands against a whitelist, enabling potentially harmful commands to be run.

Impact Analysis

An attacker with the required permissions could execute arbitrary commands on the system, potentially leading to full system compromise, data loss, or disruption of services.

Hi! I’m here to help you understand CVE-2025-10622. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70