CVE-2026-52903

Summary

ManageIQ contains a deserialization vulnerability where untrusted YAML data is silently converted to unsafe loading, allowing authenticated attackers to execute arbitrary code through crafted YAML payloads. This affects systems using the YamlLoadAliases module and can lead to full system compromise.

Exploitability

Exploitation requires an authenticated user with dialog import access, making it moderately difficult but achievable through social engineering or compromised credentials, with no additional preconditions beyond standard authentication.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code on the target system, potentially leading to complete system compromise and data exfiltration across all managed resources.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the dialog import functionality immediately, as no patches or errata are available for ManageIQ or CloudForms due to its End of Life status.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.