A flaw was found in Red Hat Ansible Automation Platform's automation- controller. (CVE-2026-84499)
A vulnerability in Red Hat Ansible Automation Platform's automation-controller allows a user with delegated JobTemplate Admin role to recover plaintext passwords stored in survey questions. This occurs when revalidating a schedule or workflow job template node against a tightened survey specification, causing the controller to decrypt and expose the password in an HTTP error message.
AI Analysis
Technical Summary
CVE-2026-84499 describes a flaw in Red Hat Ansible Automation Platform's automation-controller where password-type survey questions, normally stored encrypted and write-only, are decrypted and included in plaintext within validation error messages during revalidation of job templates or schedules. A user with delegated JobTemplate Admin privileges can exploit this by tightening survey length constraints to trigger revalidation on nodes created by higher-privileged users, thereby extracting their stored passwords in plaintext.
Potential Impact
An attacker with delegated JobTemplate Admin role can obtain plaintext passwords of other users by manipulating survey constraints and triggering revalidation, leading to credential disclosure. This compromises confidentiality but does not affect integrity or availability.
Mitigation Recommendations
A security update is available from Red Hat as part of Red Hat Ansible Automation Platform 2.6. Users should apply the official patch provided in Red Hat Advisory RHSA-2026:71113 to remediate this vulnerability.
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. (CVE-2026-84499)
Description
A vulnerability in Red Hat Ansible Automation Platform's automation-controller allows a user with delegated JobTemplate Admin role to recover plaintext passwords stored in survey questions. This occurs when revalidating a schedule or workflow job template node against a tightened survey specification, causing the controller to decrypt and expose the password in an HTTP error message.
CVSS v3.1
Score 7.7high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-84499 describes a flaw in Red Hat Ansible Automation Platform's automation-controller where password-type survey questions, normally stored encrypted and write-only, are decrypted and included in plaintext within validation error messages during revalidation of job templates or schedules. A user with delegated JobTemplate Admin privileges can exploit this by tightening survey length constraints to trigger revalidation on nodes created by higher-privileged users, thereby extracting their stored passwords in plaintext.
Potential Impact
An attacker with delegated JobTemplate Admin role can obtain plaintext passwords of other users by manipulating survey constraints and triggering revalidation, leading to credential disclosure. This compromises confidentiality but does not affect integrity or availability.
Mitigation Recommendations
A security update is available from Red Hat as part of Red Hat Ansible Automation Platform 2.6. Users should apply the official patch provided in Red Hat Advisory RHSA-2026:71113 to remediate this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-fmp7-4cgr-jc56
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-84499"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
- State
- PUBLISHED
Patch Information
Threat ID: 6ab4be21f7a7c54106eee6f5
Added to database: 09/24/2026, 06:07:29 UTC
Last enriched: 09/24/2026, 06:19:28 UTC
Last updated: 09/25/2026, 02:47:33 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.