Cross-Site Scripting in Red Hat Ansible Automation Platform's Automation Controller
CVE-2026-84683
8.7HIGH
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 23 September 2026
What is CVE-2026-84683?
A vulnerability exists in Red Hat Ansible Automation Platform's automation controller where ANSI terminal escape sequences are not adequately sanitized before rendering HTML output. This allows a low-privileged user or an external party to inject malicious JavaScript links into the output. When a higher-privileged user views this compromised output, they may inadvertently execute attacker-controlled scripts within their authenticated session, leading to potential unauthorized actions and full platform compromise.
Affected Version(s)
Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:4.6.33-1.el8ap
Red Hat Ansible Automation Platform 2.5 for RHEL 9 0:4.6.33-1.el9ap
Red Hat Ansible Automation Platform 2.6 1789673739