Threats Tagged 'ghsa-26cj-h793-xx7v'

CVE-2026-76648 is a high-severity vulnerability in Red Hat Ansible Automation Platform 2.7 involving missing authorization checks in the CopyAPIView. The POST method lacks proper object-level read permission validation, allowing users with certain roles to copy JobTemplate objects without having read access to the source. This could lead to unauthorized information disclosure. Red Hat has released an update to address this issue.