The vulnerability exists in the automation-controller notification subsystem where NotificationTemplate.notification_ configuration is protected from API filtering, but its recipient value is copied in clear text into the unprotected Notification.recipients field on every send. The credential-types endpoint is listable by any authenticated user, and the API filter backend traverses object relations without per-hop authorization. This allows a user with no privileges to use a relational filter as a boolean count-oracle to recover, character by character and across organizations, secret recipient values of other tenants' notifications, including PagerDuty service keys and bearer-token URLs for Slack, Mattermost, RocketChat, and Webhook integrations. The vulnerability results in unauthorized disclosure of sensitive information, impacting confidentiality.

An attacker with only authenticated user access but no privileges can exploit this flaw to recover secret notification recipient values from other tenants, including sensitive service keys and bearer tokens. This leads to a confidentiality breach but does not affect integrity or availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch is explicitly stated in the advisory. Users should monitor the Red Hat advisory for updates and consider limiting access to the credential-types endpoint or applying any recommended mitigations once available.