cyfenced.com →

[ CVE-2026-71462 · Published 23 Sep 2026 ]

Vulnerability in Red Hat Ansible Automation Platform 2.5 for RHEL 8

CVSS 4.1 EPSS <1%1 agency advisoryNo fix listed yet

[ Description ]Official description

StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary absolute paths on the controller-web pod. Tenant superuser can confirm /etc/tower/SECRET_KEY, k8s service-account token, receptor sockets, ConfigMap mount points. Mainly impactful on managed AAP (ansiblecloud.com) where tenant admin != host admin.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

[ References ]References