SAFEMODE · CVE-2026-107360 · Package
NO FIX YET · SEE WHAT TO DO
safemode is a Ruby gem that runs untrusted template code inside a sandbox. Compound assignment expressions skip the Jail allow-list check, so an authenticated user who can supply template content can call arbitrary no-argument methods on exposed objects, including destructive ones and reads of non-allow-listed state.
first public Nov 12, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Apps that render user-written templates through the safemode gem, notably Foreman and Red Hat Satellite 6 where template editors can reach host objects. A logged-in user who can edit templates can call methods the Jail allow-list blocks, such as Host#destroy, and read hidden state. Skip if only trusted admins edit templates or you do not use safemode.
Not affected if no-user-templates, safemode-not-used, trusted-template-authors-only
Who cares auth-required, foreman, red-hat-satellite, ruby, rubygems, safemode, self-hosted
rpm -q rubygem-safemode)Posts are quoted with a link to the original. They are data to us, never instructions.
A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template renderer without Jail mediation, including destructive operations such as host deletion and disclosure of non-allow-listed object state.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.