PyPI/foreman-mcp-server CVE-2026-9073: medium 6.2, EPSS 0.21%

foreman-mcp-server Inserts Sensitive Information into Log File

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2026-4050
• https://nvd.nist.gov/vuln/detail/CVE-2026-9073
• https://github.com/theforeman/foreman-mcp-server/commit/0f166d7e3e8ec554e669da17211fdffd14740e2f
• https://github.com/theforeman/foreman-mcp-server/commit/f9594e8127c77e0eed3ca482b540b88c391e8e44
• https://access.redhat.com/errata/RHSA-2026:28405
• https://access.redhat.com/errata/RHSA-2026:28438
• https://access.redhat.com/security/cve/CVE-2026-9073
• https://bugzilla.redhat.com/show_bug.cgi?id=2480151
• https://github.com/InfraMCP/foreman-mcp-server
• https://pypi.org/project/foreman-mcp-server
• https://github.com/advisories/GHSA-7rcj-2493-83x3

CVE-2026-9073 · published 2026-10-01T16:38:28.985087Z · modified 2026-10-01T17:45:03.785318217Z · JSON