CVE-2026-52903

A deserialization of untrusted data vulnerability exists in ManageIQ within the YamlLoadAliases module. The module overrides YAML.safe_load to silently fall back to YAML.unsafe_load in production environments when a Psych::DisallowedClass error occurs. An authenticated attacker with dialog import...