CVE-2026-107203
5.4MediumPublished 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Limited impact
- Weakness
- CWE-863
Impact
Authenticated low-privileged users can view and modify network interface records belonging to hosts they do not have permission to access. They need valid credentials with basic host view or edit permissions and access to a shared domain or subnet.
Root cause
The domain and subnet interface API validates that a caller holds host permissions but fails to apply the corresponding search filter limits, returning and modifying all interfaces across the shared network scope.
Affected systems
Foreman (specific versions not listed — check the vendor advisory).
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Fix & remediation
Upgrade Foreman packages once vendor patches are released; in the interim, restrict domain and subnet view permissions for untrusted users or isolate sensitive hosts into distinct domains and subnets.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The domain and subnet interface API checks only that the caller holds a host permission. It does not apply the search limit on that permission, so the request is answered from every interface on the domain or subnet. A low-privileged network attacker or user must already be allowed to view some hosts and to view a domain or subnet shared with other hosts. They can request that domain or subnet's interfaces. The response includes interface records of hosts they are not allowed to view. If the attacker or user is also allowed to edit some hosts, they can submit a change to one of those interfaces. The interface is then saved with that change.