CVE-2026-71464
Fixed in a distro release EPSS <1%CVSS 3.1
LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers. Schedule and WFJT Node accept --upload-pack=/bin/id as scm_branch. Currently blocked at runtime by jobs.py:1502 ValueError check (defense-in-depth), but the API validation gap means sole reliance on a task-layer guard. Refactoring that guard away would promote this to RCE.
Products: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Ansible Automation Platform 2.6, Red Hat Ansible Automation Platform 2.7
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat ansible automation platform 2.5 | automation-controller-venv-tower | 0:4.6.33-1.el8ap |
| Red Hat ansible automation platform 2.5 | automation-controller-venv-tower | 0:4.6.33-1.el9ap |
| Red Hat ansible automation platform 2.5 | automation-gateway-proxy-server | 0:2.5.10-8.el8ap |
| Red Hat ansible automation platform 2.5 | automation-gateway-proxy-server | 0:2.6.17-3.el9ap |
| Red Hat ansible automation platform 2.5 | automation-gateway-server | 0:2.5.20260923-1.el9ap |
| Red Hat ansible automation platform 2.5 | automation-gateway-server | 0:2.5.20260923-1.el8ap |
| Red Hat ansible automation platform 2.5 | python3.12-gitpython | 0:3.1.60-1.el9ap |
| Red Hat ansible automation platform 2.5 | python3.12-gitpython | 0:3.1.60-1.el8ap |
| Red Hat ansible automation platform 2.5 | python3.12-sqlparse | 0:0.6.0-1.el9ap |
| Red Hat ansible automation platform 2.5 | python3.12-sqlparse | 0:0.6.0-1.el8ap |
| Red Hat ansible automation platform 2.5 | receptor | 0:1.6.8-1.el9ap |
| Red Hat ansible automation platform 2.5 | receptor | 0:1.6.8-1.el8ap |
| Red Hat ansible automation platform 2.6 | automation-controller | 0:4.7.17-1.el9ap |
| Red Hat ansible automation platform 2.6 | automation-controller-cli | 0:4.7.17-1.el9ap |
| Red Hat ansible automation platform 2.6 | automation-controller-server | 0:4.7.17-1.el9ap |
| Red Hat ansible automation platform 2.6 | automation-controller-ui | 0:4.7.17-1.el9ap |
| Red Hat ansible automation platform 2.6 | automation-controller-venv-tower | 0:4.7.17-1.el9ap |
| Red Hat ansible automation platform 2.6 | automation-gateway-proxy-server | 0:2.6.17-3.el9ap |
| Red Hat ansible automation platform 2.6 | automation-platform-ui | 0:2.6.14-1.el9ap |
| Red Hat ansible automation platform 2.6 | python-sqlparse | 0:0.6.0-1.el10ap |
| Red Hat ansible automation platform 2.6 | python3-sqlparse | 0:0.6.0-1.el10ap |
| Red Hat ansible automation platform 2.6 | python3.12-gitpython | 0:3.1.60-1.el9ap |
| Red Hat ansible automation platform 2.6 | python3.12-sqlparse | 0:0.6.0-1.el9ap |
| Red Hat ansible automation platform 2.6 | receptor | 0:1.6.8-1.el10ap |
| Red Hat ansible automation platform 2.6 | receptor | 0:1.6.8-1.el9ap |
| Red Hat ansible automation platform developer 2.5 | python3.12-sqlparse | 0:0.6.0-1.el9ap |
| Red Hat ansible automation platform developer 2.5 | python3.12-sqlparse | 0:0.6.0-1.el8ap |
| Red Hat ansible automation platform developer 2.5 | receptor | 0:1.6.8-1.el8ap |
| Red Hat ansible automation platform developer 2.5 | receptor | 0:1.6.8-1.el9ap |
| Red Hat ansible automation platform developer 2.6 | automation-controller | 0:4.7.17-1.el9ap |
| Red Hat ansible automation platform developer 2.6 | automation-controller-cli | 0:4.7.17-1.el9ap |
| Red Hat ansible automation platform developer 2.6 | python-sqlparse | 0:0.6.0-1.el10ap |
| Red Hat ansible automation platform developer 2.6 | python3-sqlparse | 0:0.6.0-1.el10ap |
| Red Hat ansible automation platform developer 2.6 | python3.12-sqlparse | 0:0.6.0-1.el9ap |
| Red Hat ansible automation platform developer 2.6 | receptor | 0:1.6.8-1.el9ap |
| Red Hat ansible automation platform inside 2.5 | receptor | 0:1.6.8-1.el9ap |
| Red Hat ansible automation platform inside 2.5 | receptor | 0:1.6.8-1.el8ap |
| Red Hat ansible automation platform inside 2.6 | receptor | 0:1.6.8-1.el9ap |