Search: CVE-2026-84719

CVE-2026-84719 is a critical missing authorization vulnerability in Red Hat Ansible Automation Platform 2.4 for RHEL 8. The flaw occurs when copying a WorkflowJobTemplate, where the deep-copy permission sanitizer fails to verify authorization on instance_groups, execution_environment, and labels preserved from the original. This allows a user with organization workflow-admin permission but no role on certain instance groups to copy a workflow, gain administrator rights on it, and launch jobs on unauthorized instance groups, including the control-plane instance group. This bypasses intended role boundaries and enables attacker-influenced automation to run with elevated privileges in the control-plane execution context.