This vulnerability involves improper neutralization of special elements used in OS commands within the galaxy_ng component of Red Hat Ansible Automation Platform 2. Specifically, the do_git_checkout() function in the legacy role import API (v1) uses subprocess.run() with shell=True to execute shell commands that include git ref names (branch or tag names) without sanitization. An authenticated attacker who controls a git repository can craft branch or tag names containing shell metacharacters to execute arbitrary code remotely on the pulp worker. The vulnerable functionality is only accessible if the GALAXY_ENABLE_LEGACY_ROLES configuration is set to True, which is not the default setting.

Successful exploitation allows an authenticated user with control over a git repository to achieve remote code execution on the pulp worker component of Red Hat Ansible Automation Platform 2. This can lead to full compromise of the affected system, impacting confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.5 (High), reflecting network attack vector, high impact on confidentiality, integrity, and availability, but requiring low privileges and high attack complexity.

The vendor advisory does not explicitly state the availability of a patch or official fix at this time. Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-12398 for current remediation guidance. Mitigation includes ensuring that the GALAXY_ENABLE_LEGACY_ROLES setting remains disabled (the default), which prevents access to the vulnerable endpoint. Avoid enabling legacy roles unless necessary and monitor vendor updates for patches or official fixes.