Automation-controller: automation-controller-container: automation-controller: custom_venv_path setting provides filesystem path-existence oracle on control pod
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.1epss 0.3%
probabilidade de exploração
0.3%top 85% das CVEs
exploração observada
nãonenhuma fonte reporta
StringListPathField.to_internal_value() calls
os.path.exists() on unbounded user-supplied paths.
200 vs 400 response reveals existence of arbitrary
absolute paths on the controller-web pod. Tenant
superuser can confirm /etc/tower/SECRET_KEY, k8s
service-account token, receptor sockets, ConfigMap
mount points. Mainly impactful on managed AAP
(ansiblecloud.com) where tenant admin != host admin.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Produtos afetados
Red Hat · Red Hat Ansible Automation Platform 2.5 for RHEL 8Red Hat · Red Hat Ansible Automation Platform 2.5 for RHEL 9Red Hat · Red Hat Ansible Automation Platform 2.6Red Hat · Red Hat Ansible Automation Platform 2.6 for RHEL 9Red Hat · Red Hat Ansible Automation Platform 2.7Referências
https://access.redhat.com/errata/RHSA-2026:71113https://access.redhat.com/errata/RHSA-2026:71114https://access.redhat.com/errata/RHSA-2026:71177https://access.redhat.com/errata/RHSA-2026:71179https://access.redhat.com/security/cve/CVE-2026-71462https://bugzilla.redhat.com/show_bug.cgi?id=2512371