Log in Start free

Vulnerability · Published Sep 23, 2026 · Assigned by redhat

CVE-2026-84719Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane)

Critical 9.9

In plain English

A critical-severity missing authorization in Red Hat Ansible Automation Platform 2.4 for RHEL 8 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 39% of all known vulnerabilities).

Severity (CVSS 3.1)9.9Critical
Exploit odds (30 days)0.5%top 60.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in the Ansible Automation Platform automation-controller. When a WorkflowJobTemplate is copied, the deep-copy permission sanitizer validates only the inventory, unified_job_template, and credentials of each cloned node and fails to check the instance_groups (and execution_environment and labels) that were preserved from the original. A user with organization workflow-admin permission but no role on the referenced instance groups can copy a workflow, become its administrator, and launch jobs pinned to instance groups they are not authorized to use — including the control-plane instance group — bypassing the InstanceGroup use_role boundary and causing attacker-influenced automation to run in the control-plane execution context.

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8 see references
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8 see references
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 see references
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 see references
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.6 see references
Red Hat Red Hat Ansible Automation Platform 2.7 see references

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References