CVE-2026-79654 Red Hat CVE debrief

Who should care

Roles and deployment contexts that should assess exposure include administrators and users with access to Content Views in Katello, as well as security teams responsible for monitoring and controlling access to sensitive information.

Why it matters

CVE-2026-79654 is a medium-severity vulnerability in Katello's Content View History API that allows unauthorized access to Content View lifecycle information. Defenders should assess exposure and verify authorization for API access, particularly for authenticated users with permission to view Content Views. The vulnerability requires verification of affected versions, exploitation, and remediation from official sources.

• Potential unauthorized disclosure of Content View lifecycle information
• Possible access to sensitive information, including publication and promotion events, associated users, and timestamps

Technical summary

A flaw in Katello's Content View History API allows an authenticated user with permission to view Content Views in one organization to access the lifecycle history of a Content View belonging to another organization. This can result in unauthorized disclosure of Content View lifecycle information, including publication and promotion events, associated users, and timestamps. The vulnerability requires verification of affected versions, exploitation, and remediation from official sources. Defenders should assess exposure and verify authorization for API access.

Defensive priority

Assess exposure and verify authorization for Content View History API access.

Recommended defensive actions

• Verify authorization for Content View History API access
• Assess exposure for authenticated users with permission to view Content Views
• Review and update access controls for Content View lifecycle information
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record and NVD entry provide details on the authorization flaw in Katello's Content View History API. The flaw allows an authenticated user with permission to view Content Views in one organization to access the lifecycle history of a Content View belonging to another organization. Evidence is limited to public sources, and defenders should verify affected scope, severity, and vendor guidance. Official advisories and CVE records should be reviewed to validate affected scope, severity, and vendor guidance.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.