Authorization Bypass in Ansible Automation Platform Gateway
CVE-2026-94416

6.8MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Ansible Automation Platform 2
Vendor
CVE Published:
24 September 2026

What is CVE-2026-94416?

The Ansible Automation Platform gateway suffers from an authorization bypass issue that allows an authenticated administrator to create service keys without proper restrictions, leading to potential impersonation of the Controller service. This vulnerability could enable an attacker to forge service-authentication tokens, facilitating unauthorized access to sensitive workloads. When exploited in conjunction with the gateway's OIDC workload-identity endpoint, it poses a significant risk of credential exposure from downstream services, such as HashiCorp Vault, which may accept these forged tokens, effectively breaching security boundaries.

References

https://access.redhat.com/security/cve/CVE-2026-94416
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2537465
issue-trackingx_refsource_REDHAT
https://github.com/ansible/ansible.platform/pull/254

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.