Insecure Job Event Summary in Red Hat Product
CVE-2026-71459
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 23 September 2026
What is CVE-2026-71459?
The JobJobEventsChildrenSummary view in Red Hat's job management system is vulnerable due to a lack of proper access control mechanisms. Specifically, the ModelAccessPermission.check_get_permissions() function fails to restrict access, allowing any authenticated user to view sensitive job event data. The view incorrectly relies on a direct database lookup without implementing necessary object-level permission checks, which exposes internal event structures and job IDs. This vulnerability could lead to an unauthorized enumeration of job data, potentially impacting the security and integrity of job management activities.
Affected Version(s)
Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:4.6.33-1.el8ap
Red Hat Ansible Automation Platform 2.5 for RHEL 9 0:4.6.33-1.el9ap
Red Hat Ansible Automation Platform 2.6 1789673739