CVE-2026-84713 is a vulnerability in the automation-controller notification subsystem that allows an authenticated user with low privileges to recover secret recipient values from other tenants' notifications. This occurs because sensitive recipient data is copied in clear text into an unprotected field and can be extracted via a relational filter acting as a boolean count-oracle. The flaw affects confidentiality but does not impact integrity or availability.