Flaw in Automation Controller Notification Subsystem Affects Red Hat
CVE-2026-84713
6.5MEDIUM
Key Information:
- Vendor
Red Hat
- Vendor
- CVE Published:
- 23 September 2026
What is CVE-2026-84713?
A security issue has been identified in the Automation Controller's notification subsystem, where sensitive recipient values are inadvertently stored in clear text. This vulnerability could allow an authenticated user to exploit the system, potentially exposing confidential notification details, including service keys and bearer token URLs, across tenant organizations. The root of the problem lies in the lack of proper API filtering and authorization checks, allowing unauthorized access to sensitive data even by users with limited privileges.
Affected Version(s)
Red Hat Ansible Automation Platform 2.7 1789580684