Unbounded User-Supplied Path Vulnerability in Ansible Automation Platform by Red Hat
CVE-2026-71462

4.1MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Ansible Automation Platform 2
Vendor
CVE Published:
23 September 2026

What is CVE-2026-71462?

This vulnerability allows for potential exposure of sensitive information due to inadequate validation of user-supplied paths in the Ansible Automation Platform. The method StringListPathField.to_internal_value() inappropriately calls os.path.exists() on unrestricted paths, which enables attackers to verify the existence of critical files like /etc/tower/SECRET_KEY and Kubernetes tokens. This flaw predominantly affects managed environments, where the privileges of the tenant administrator do not align with those of the host administrator, making it easier to exploit for unintended disclosures.

References

https://access.redhat.com/security/cve/CVE-2026-71462
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2512371
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Chris Meyers (Red Hat).
.