Threats Tagged 'ghsa-p82w-cg44-8jjx'

CVE-2026-71464 is a low severity vulnerability in Red Hat Ansible Automation Platform 2.5 for RHEL 8 involving improper neutralization of argument delimiters in the scm_branch parameter. The LaunchConfigurationBaseSerializer lacks a validate_scm_branch() leading-dash check, allowing potentially dangerous input such as --upload-pack=/bin/id. Although runtime checks currently block exploitation, the absence of API-level validation means that removal of these runtime guards could lead to remote code execution.