Threats tagged 'ghsa-9fg4-x49f-5hhc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.9	EPSS 0.5%	CVE-2026-84719automation-controller · Missing Authorization Critical9.9EPSS 0.5%2026-09-23GCVE DatabaseCVE-2026-84719 A critical vulnerability (CVE-2026-84719) exists in the Ansible Automation Platform automation-controller. The flaw allows a user with organization workflow-admin permission but no role on certain instance groups to copy a workflow job template and gain unauthorized administrative control. This enables launching jobs pinned to instance groups they are not authorized to use, including the control-plane instance group, bypassing intended role boundaries and causing automation to run in a privileged execution context. EPSS 0.5%Report on CVE-2026-84719 Vulnerability CWE-862 #ghsa-9fg4-x49f-5hhc	GCVE Database	2026-09-23

Page 1 of 1