CVE-2026-107360: Rubygem-safemode: safemode: jail allow-list bypass via op-assign expressions
Red Hat · Red Hat Satellite 6.16 for RHEL 8
Vendor fix available · Affected: Red Hat Satellite 6.16 for RHEL 8 · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
No EPSS score yet. The score appears once FIRST publishes it.
DescriptionNVD
A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template renderer without Jail mediation, including destructive operations such as host deletion and disclosure of non-allow-listed object state.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 13 Nov.
- Red Hat fixes critical sandbox bypass in SatelliteSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.