Security Flaw in Ansible Automation Platform Affects Workflow Job Template Management
CVE-2026-84719
Key Information:
What is CVE-2026-84719?
A security flaw exists in the Ansible Automation Platform's automation controller, specifically when handling WorkflowJobTemplate cloning. The vulnerability arises due to insufficient validation in the deep-copy permission sanitizer, which only checks the inventory, unified job template, and credentials of cloned nodes. As a result, instance groups, execution environments, and labels retained from the original nodes are not verified. This weakness allows a user with organization workflow-admin permissions to replicate a workflow, gain unauthorized administrative access, and execute jobs tied to instance groups that they should not have access to, including control-plane instance groups. This could lead to unauthorized execution of automation tasks within a sensitive execution context.
Affected Version(s)
Red Hat Ansible Automation Platform 2.4 for RHEL 8 0:4.5.36-1.el8ap
Red Hat Ansible Automation Platform 2.4 for RHEL 9 0:4.5.36-1.el9ap
Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:4.6.33-1.el8ap