EUVD-2026-44739
GHSA-45w6-c976-v24q
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Unauthenticated network header spoofing (PR:N/AV:N/AC:L) yields arbitrary event injection so I:H; impact is injection not disclosure or downtime, so C:N and A:N.
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
Lifecycle Timeline
2DescriptionCVE.org
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed Subject header matching a legitimate client certificate DN to bypass mTLS authentication and inject arbitrary events into protected EDA event streams.
AnalysisAI
mTLS authentication bypass in the Red Hat Ansible Automation Platform (AAP) Gateway Envoy proxy allows unauthenticated remote attackers to inject spoofed events into protected Event-Driven Ansible (EDA) event streams. The non-mTLS route to EDA event streams fails to strip the client-supplied Subject HTTP header even though the source defines requestHeadersToRemove for it, so an attacker can forge a Subject value matching a legitimate client certificate's Distinguished Name and impersonate an authenticated client. No public exploit identified at time of analysis; the issue is tracked by Red Hat (CWE-290, CVSS 8.2) but is not on CISA KEV and no EPSS score was provided.
Technical ContextAI
The affected component is the Envoy proxy that fronts AAP Gateway routing to Event-Driven Ansible. Envoy normally enforces mutual TLS (mTLS) and translates the validated client certificate identity into internal HTTP headers, while stripping any client-supplied copies of those trust-bearing headers via a requestHeadersToRemove directive. Here the non-mTLS route configuration for EDA event streams does not actually remove the inbound Subject header, so a header that should only ever be injected by the proxy after certificate validation is instead passed through verbatim from the client. This is a textbook CWE-290 (Authentication Bypass by Spoofing): downstream services trust the Subject header as proof of a validated certificate DN, but that trust boundary is broken because the header is attacker-controllable on the non-mTLS path. Per the supplied CPE data (cpe:2.3:a:red_hat:red_hat_ansible_automation_platform_2), the impact is scoped to Red Hat Ansible Automation Platform 2.x.
RemediationAI
No vendor-released patch version was identified in the available data; monitor and apply the fix listed on the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-12382 (tracking bug https://bugzilla.redhat.com/show_bug.cgi?id=2489126) once a fixed AAP 2 release is published, as the root cause is a corrected Envoy requestHeadersToRemove configuration that strips the Subject header on the EDA route. As a compensating control until patched, enforce removal of the client-supplied Subject header at the proxy or an upstream reverse proxy/WAF for all requests reaching the EDA event-stream route so forged values cannot pass through (trade-off: requires careful config so legitimate proxy-injected identity headers are not also dropped). Where feasible, require mTLS on the EDA event-stream route rather than exposing a non-mTLS path (trade-off: certificate provisioning overhead for legitimate clients), and restrict network access to the EDA event-stream endpoint to trusted management networks to reduce unauthenticated exposure.
Credential disclosure in Red Hat Ansible Automation Platform 2.5 and 2.6 allows any authenticated user to retrieve plain
Server-side request forgery in the Red Hat Ansible Automation Platform 2 Controller's HashiCorp Vault credential plugin
Arbitrary file write in pulpcore's FilesystemExport feature allows an authenticated administrator to escape the intended
Arbitrary command execution in ansible-core allows an attacker who controls a collection source URI to run commands on a
Local code execution in the Visual Studio Code Ansible (Lightspeed) extension lets a malicious project run arbitrary she
Credential exfiltration via SSRF in AWX's GitHub webhook status callback affects Red Hat Ansible Automation Platform 2:
SSRF vulnerabilities in AWX notification backends (webhook, Mattermost, Rocket.Chat, and Grafana) allow an authenticated
Remote code execution in galaxy_ng's legacy role import API (v1) allows an authenticated user controlling a git reposito
Path traversal in AWX's project_archive action plugin allows arbitrary file writes to execution node filesystems outside
Incomplete RBAC authorization in AWX's websocket event consumer exposes real-time job stdout to any authenticated user,
Server-side request forgery in galaxy_ng, the Ansible Galaxy server plugin for Pulp, allows authenticated users holding
Container privilege escalation in Red Hat Ansible Automation Platform 2 allows non-root users within affected container
Same weakness CWE-290 – Authentication Bypass by Spoofing
View allSame technique Authentication Bypass
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today