Threats tagged 'ghsa-p5f2-j2p5-7p7v'

A critical vulnerability (CVE-2026-12564) exists in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function improperly sends the Kubernetes service account token to an attacker-controlled URL when testing a HashiCorp Vault Secret Lookup credential with kubernetes_role authentication. This allows an authenticated attacker with credential-creation privileges to exfiltrate the token and gain Kubernetes API access with full pod CRUD and secret read permissions, including sensitive credentials and the Django SECRET_KEY. A fix is available from Red Hat in Ansible Automation Platform 2.7.