CVE-2026-107445

A flaw in Katello exists where the Flatpak Remote Repositories API fails to properly enforce authorization when accessing repositories by identifier. This allows an authenticated user with permissions in one organization to potentially access repository information belonging to a different organi...

EUVD-2026-94693

A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An authenticated user with permission to view flatpak remotes in one organization may be able to access flatpak remote repository...