DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Ansible Automation Platform (automation-controller): Mehrere Schwachstellen
view advisory published 2026-09-23
Ein Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen und einen Denial-of-Service-Zustand herbeizuführen.
01
describes (61)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-85475US | high7.2 | — | ||
A flaw was found in the Ansible Automation Platform automation controller. The
external logging (rsyslog) configuration is generated by interpolating
user-controlled settings — LOG… | ||||
| CVE-2026-84724US | medium6.6 | — | ||
An argument-injection flaw was found in the Ansible Automation Platform automation-controller
system-job subsystem. The system-job template launch endpoint stores a user-supplied "… | ||||
| CVE-2026-84721US | medium6.4 | — | ||
A server-side request forgery flaw was found in the Ansible Automation Platform
automation-controller email notification backend. The email backend passes the user-supplied SMTP
ho… | ||||
| CVE-2026-84720US | medium6.5 | — | ||
A flaw was found in the Ansible Automation Platform automation-controller. The
WorkflowJobNode.ancestor_artifacts database column, which stores the raw merged set_stats
artifacts p… | ||||
| CVE-2026-84719US | critical9.9OT elevated | — | ||
A flaw was found in the Ansible Automation Platform automation-controller. When a
WorkflowJobTemplate is copied, the deep-copy permission sanitizer validates only the inventory,
un… | ||||
| CVE-2026-84718US | medium4.3 | — | ||
A flaw was found in the Ansible Automation Platform automation-controller. In the shipped
production configuration, the Controller trusts the client-supplied X-Forwarded-For header… | ||||
| CVE-2026-84717US | medium5.3 | — | ||
A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated
Bitbucket Data Center webhook receiver skips HMAC signature verification for diagnost… | ||||
| CVE-2026-84716US | medium6.6 | — | ||
A flaw was found in the automation-controller instance
install-bundle endpoint. When a System Administrator downloads
an execution/hop node's in… | ||||
| CVE-2026-84714US | high7.1 | — | ||
A flaw was found in the automation-controller input-validation
guard sanitize_jinja(). The function uses two regular
expressions to reject user-… | ||||
| CVE-2026-84713US | medium6.5 | — | ||
A flaw was found in the automation-controller notification
subsystem. Although NotificationTemplate.notification_
configuration is protected fro… | ||||
| CVE-2026-84712US | medium5.3 | — | ||
A flaw was found in the automation-controller API. The
unauthenticated health-check endpoint /api/v2/ping/
(ApiV2PingView, AllowAny) over-serial… | ||||
| CVE-2026-84706US | high7.6 | — | ||
A flaw was found in Ansible Automation Platform's automation-controller. The custom
Credential Type environment-variable injector validates variable names against a
deny-list (an A… | ||||
| CVE-2026-84691US | high8.7 | — | ||
A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. The setting that formats the log message emitted for API 4XX errors
is an administrator-controlled… | ||||
| CVE-2026-84683US | high8.7 | — | ||
A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. The HTML view of job, ad hoc command, project update, and inventory
update standard output escapes… | ||||
| CVE-2026-75884US | critical9.1 | — | ||
A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContai… | ||||
| CVE-2026-84502US | critical9.9 | — | ||
A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. The Project scm_url field is not validated against values that
begin with a dash and is stored and… | ||||
| CVE-2026-84499US | high7.7 | — | ||
A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. Survey questions of type password are write-only and stored
encrypted, displayed only as a placeho… | ||||
| CVE-2026-84486US | high8.2OT elevated | — | ||
A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. Four debug views that trigger the internal task, dependency, and
workflow schedulers are configure… | ||||
| CVE-2026-84474US | critical9.9 | — | ||
A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. The provisioning-callback secret (host_config_key) is exposed to
users holding only the read-level… | ||||
| CVE-2026-76648US | high8.5OT elevated | — | ||
CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes =
(IsAuthenticated,), so DRF's get_object() performs no object-level
RBAC. The get() handler (lines 988–991) expli… | ||||
showing 20 of 61
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:70587 vom 2026-10-01external
- Red Hat Security Advisory RHSA-2026:71115 vom 2026-09-23external
- Red Hat Security Advisory RHSA-2026:71177 vom 2026-09-23external
- Red Hat Security Advisory RHSA-2026:71543 vom 2026-09-24external
- Red Hat Security Advisory RHSA-2026:74081 vom 2026-09-30external
- Red Hat Security Advisory RHSA-2026:74082 vom 2026-09-30external
- Red Hat Security Advisory RHSA-2026:74503 vom 2026-10-01external
- Red Hat Security Advisory RHSA-2026:74504 vom 2026-10-02external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan