CVE-2026-12112

HighCVSS 7.8

Published: 23/06/2026(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

A session management vulnerability was found in the foreman-mcp-server. An unauthenticated attacker can hijack active administrative sessions due to improper caching of authenticated connections, trusting a non-secret session ID without re-validating authentication tokens, and logging all newly created session IDs to standard logs. This issue can lead to privilege escalation and infrastructure-wide code execution.

Risk Assessment

The organization is at risk of administrative session hijacking, which could result in unauthorized access to critical resources and remote code execution across the entire infrastructure.

Recommendation

Immediately update foreman-mcp-server to a patched version and implement mechanisms to re-validate authentication tokens for every session request.

Other vulnerabilities in foreman-mcp-server

CVE-2026-9073Medium
A flaw in foreman-mcp-server exposes sensitive authentication data through two logging mechanisms. Session identifiers and, when debug logging is enabled, authorization tokens and API keys are logged in cleartext.

Original NVD description (English source)

A flaw was found in the foreman-mcp-server. A session management vulnerability in the MCP Server allows unauthenticated attackers to hijack active administrative sessions due to an improper cache of authenticated client connections, by trusting a non-secret session ID without re-validating authentication tokens and by logging all newly created session IDs to standard logs. This issue can result in privilege escalation and infrastructure-wide code execution.