CVE-2026-92894
Last modified
CVE-2026-92894 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. A flaw was found in the foreman_ansible plugin's Ansible override values API. The destroy action resolves the target LookupValue record by ID without verifying it belongs to an AnsibleVariable the caller is authorized to edit.
Description
A flaw was found in the foreman_ansible plugin's Ansible override values API. The destroy action resolves the target LookupValue record by ID without verifying it belongs to an AnsibleVariable the caller is authorized to edit. An authenticated user with the edit_ansible_variables permission can delete any LookupValue by ID, including override values for Ansible variables outside their permission filter scope and override values belonging to Puppet smart class parameters.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Satellite 6 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-92894?
How severe is CVE-2026-92894?
How do I fix CVE-2026-92894?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-92885The Qode Membership plugin for WordPress is vulnerable to Au…9.8
- CVE-2026-92886Missing Authorization vulnerability in TÜBİTAK BİLGEM Softwa…7.8
- CVE-2026-92887Incorrect default value in the REST API framework's .rest.xm…
- CVE-2026-9289The WordLift – AI powered SEO – Schema plugin for WordPress …5.3
- CVE-2026-92892Potential arbitrary code execution under specific configurat…9
- CVE-2026-92893A flaw was found in the foreman_ansible plugin's Ansible inv…4.3
- CVE-2026-92895The Live2DWebCanvas plugin for WordPress is vulnerable to Ar…8.1
- CVE-2026-92899Apache WSS4J remembers the Nonce of each UsernameToken it ac…4.8
- CVE-2026-9290The WP User Manager – User Profile Builder & Membership plug…7.5
- CVE-2026-92903Improper input validation in Snowflake CLI versions prior to…8.2
- CVE-2026-92904A flaw was found in the foreman_remote_execution plugin's te…4.3
- CVE-2026-92905ZohoCorp ManageEngine EventLog Analyzer and Log360 before bu…5.3
Are you affected by CVE-2026-92894?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST