CVE-2026-52903

A deserialization of untrusted data vulnerability exists in ManageIQ within the YamlLoadAliases module. The module overrides YAML.safe_load to silently fall back to YAML.unsafe_load in production environments when a Psych::DisallowedClass error occurs. An authenticated attacker with dialog import...

CVE-2026-52903

A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safeload to silently fall back to YAML.unsafeload in production when a Psych::DisallowedClass error occurs. An authenticated attacker with dialog import access can exploit this to...