CVE-2026-107193

A flaw exists in the permission filters of the foreman package. The API loads a filter via its identifier but fails to apply the search limit corresponding to the caller's permissions. A low-privileged network attacker or user who is authorized to delete filters for only one role can exploit this...