Client IP Spoofing Vulnerability in Ansible Automation Platform
CVE-2026-84718

4.3MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Ansible Automation Platform 2
Vendor
CVE Published:
23 September 2026

What is CVE-2026-84718?

A vulnerability in the Ansible Automation Platform's automation-controller allows an attacker to manipulate the X-Forwarded-For header without proper validation from a trusted proxy. This flaw leads to the potential forgery of source IP addresses in the Controller's audit and access logs, thereby compromising the integrity of the logs. While it does not provide extra access to the attacker, the ability to alter recorded IP addresses undermines the reliability of legislative and forensic efforts in incident response.

References

https://access.redhat.com/security/cve/CVE-2026-84718
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2527211
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.