Junglewise Threat Intelligence

CVE-2026-1531: Foreman foreman_kubevirt insecure default SSL verification

CVE-2026-1531 · Severity: high · CVSS 8.1 · Published 2026-02-02

Vendors: Foreman, Red Hat, RubyGems.

Executive brief

A security flaw was found in the foreman_kubevirt plugin, which is used by Red Hat Satellite to manage OpenShift connections. The system incorrectly disables security encryption checks (SSL verification) by default if a specific certificate is not provided. This allows an attacker to intercept or modify sensitive data transmitted between the management server and the OpenShift environment.

Technical details

The foreman_kubevirt plugin (rubygem-foreman_kubevirt) fails to enforce SSL certificate validation when a Certificate Authority (CA) certificate is not explicitly configured during the OpenShift connection setup. This results in an insecure default state (CWE-295) where the system accepts any certificate presented by the remote endpoint. A remote attacker with the ability to intercept network traffic between Red Hat Satellite and OpenShift can perform a Man-in-the-Middle (MITM) attack to disclose or alter sensitive information. The vulnerability is addressed in rubygem-foreman_kubevirt version 0.4.3-1 and subsequent Red Hat Satellite errata (RHSA-2026:5968, RHSA-2026:5970).

Affected products

  • Red Hat Satellite 6.16, 6.17, 6.18
  • Foreman foreman_kubevirt before 0.4.3-1

Timeline

  • 2026-02-02: disclosed
  • 2026-03-26: patched: Red Hat released security advisories RHSA-2026:5968 and RHSA-2026:5970

References