CVE-2026-126643 is a cleartext storage vulnerability in the AAP Gateway Operator used in Red Hat Ansible Automation Platform 2.5 and later. The operator copies a protected resource-server secret in plaintext into the AutomationController custom resource, exposing it to any user with read access to that resource but without permission to read the original Kubernetes Secret. This breaks RBAC separation and risks disclosure of a sensitive authentication secret. The secret may also be exposed in Kubernetes API storage, GitOps histories, manifests, and audit data. Disclosure could allow impersonation of a trusted Controller service and access to privileged APIs.