CVE-2026-71460
Automation-controller: automation-controller-container: automation-controller: any authenticated user reads red hat subscription/license details via /config/
Using Red Hat Ansible Automation Platform 2 by Red Hat?
Get instant alerts when new vulnerabilities affect Red Hat Ansible Automation Platform 2 - before attackers find them.
Description
/api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, instance counts) returned to any authenticated user. The superuser/auditor gate only covers project_base_dir/project_local_paths/custom_virtualenvs, not license_info. Enables social engineering against Red Hat support and estate sizing reconnaissance.
Affected
We have no canonical product record for this CVE. The source names may not have matched any product.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (6)
SSVC — Action Prioritization
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- LOW
- Integrity
- NONE
- Availability
- NONE
Quick Info
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.