A vulnerability in Red Hat Ansible Automation Platform's automation-controller allows an authenticated administrator to exploit a Python format-string template used for logging API 4XX errors. This flaw permits reading sensitive application secrets such as the Django secret key and database password by crafting a malicious format string. The secrets can be exfiltrated via logs forwarded to external aggregators, potentially enabling offline decryption of stored credentials, session forgery, and direct database access.