A vulnerability in the Ansible Automation Platform automation controller allows a privileged user to inject malicious rsyslog directives via user-controlled logging configuration settings. This injection can lead to arbitrary command execution within the control-plane rsyslog component, exposing sensitive data such as the controller SECRET_KEY and database credentials, and enabling full compromise of the control plane.