CVE-2026-107360Critical· 9.6▾ AbyssalPoC availableA flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitr…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 52.8 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
1 GitHub repo
0.5% → 0.5%
A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template renderer without Jail mediation, including destructive operations such as host deletion and disclosure of non-allow-listed object state.
rubygem-safemode (all versions)rubygem-safemode (all versions)rubygem-safemode (all versions)rubygem-safemode (all versions)rubygem-safemode (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Restrict template edit privileges to trusted administrators until a fixed safemode release is deployed. Where feasible, avoid exposing highly privileged ActiveRecord objects to untrusted template authors.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-107152High· 7.1Rubygem-smart_proxy_dynflow: dynflow console authorizes any client certificate the capsule ca signed
CVE-2026-111456High· 7.1Candlepin: consumer certificate can register systems in another organization
CVE-2026-107443High· 7.7Foreman: foreman: api host template render discloses secrets to view_hosts users (incomplete cve-2026-96659 fix)
CVE-2026-86322High· 8.8Foreman: authorization flaw in the foreman::controller::useraware#find_user handling used by api::v2::personalaccesstokenscontroller
CVE-2026-86324Medium· 4.3Foreman: authorization flaw in the foreman::controller::useraware handling used by api::v2::sshkeyscontroller
CVE-2026-86323Medium· 4.3Foreman: authorization flaw in the mail-notification endpoints implemented by api::v2::mailnotificationscontroller