CVE-2026-81668
Received Received - Intake

Unauthorized Access in Katello Content View Filter Rules

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: redhat-SADP

Description
A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Content View Filter in another organization by supplying that filter's identifier. This can result in unauthorized disclosure of filter-rule information and unauthorized changes to unpublished Content View filter configuration.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-27
Last Modified
2026-08-27
Generated
2026-08-27
AI Q&A
2026-08-27
EPSS Evaluated
N/A
NVD
CVE-2026-81668
EUVD
EUVD-2026-67003

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
red_hat katello *
redhat katello *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-81668 is a flaw in Katello's Content View Filter Rules API where authorization checks are insufficient. An authenticated low-privileged user with Content View permissions in one organization can access or modify filter rules belonging to a Content View Filter in another organization by providing the target filter's identifier. This happens because the API does not validate if the user has access to the specific filter, only if they can perform actions on Content Views.

Detection Guidance

To detect this vulnerability, review Katello API logs for unauthorized access attempts to Content View Filter Rules across organizations. Check for requests with filter identifiers not belonging to the user's organization. Look for suspicious modifications to unpublished filter configurations.

Impact Analysis

This vulnerability allows unauthorized users to read metadata of filter rules and modify unpublished Content View filter configurations in other organizations. It can lead to unauthorized disclosure of sensitive information and changes to unpublished settings, though published Content View versions remain unaffected.

Compliance Impact

This vulnerability could potentially impact compliance by allowing unauthorized access to sensitive data through filter rule metadata disclosure and unauthorized modifications to unpublished configurations. Organizations handling regulated data should apply security updates promptly to mitigate risks of non-compliance.

Mitigation Strategies

Apply available security updates for rubygem-katello immediately. Temporarily restrict low-privileged users from accessing Content View Filter Rules API endpoints until patched. Monitor for unauthorized modifications to unpublished filter configurations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81668. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart