EUVD-2026-38598
GHSA-3w6r-r33r-cfg6
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Network-reachable websocket exploitable by any authenticated user (PR:L), no UI; leaks secrets that unlock other systems (S:C, C:H, I:H), no availability impact.
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
Lifecycle Timeline
1DescriptionCVE.org
A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messages. Any authenticated user can send a forged message with an arbitrary activation_id to receive plaintext credentials associated with that activation, including OAuth tokens, vault passwords, and SSH keys.
Articles & Coverage 1
AnalysisAI
Credential disclosure in Red Hat Ansible Automation Platform 2.5 and 2.6 allows any authenticated user to retrieve plaintext OAuth tokens, vault passwords, and SSH keys by sending forged Worker messages to the Event-Driven Ansible websocket endpoint. The /api/eda/ws/ansible-rulebook endpoint fails to verify permissions on activation_id values, enabling lateral credential theft across tenants. No public exploit identified at time of analysis, but the low attack complexity and scope-changed CVSS of 9.6 make this a high-priority patch.
Technical ContextAI
The vulnerability resides in the Event-Driven Ansible (EDA) controller component of Red Hat Ansible Automation Platform, specifically in the websocket API at /api/eda/ws/ansible-rulebook. EDA uses websocket connections between rulebook worker processes and the controller to exchange activation state and credential material needed to execute automation. The flaw is a classic CWE-862 (Missing Authorization): the endpoint authenticates the user session but does not perform an authorization check tying the requesting user to the activation_id referenced in inbound Worker messages, so any forged message with another tenant's activation_id is honored and the controller responds with that activation's secret bundle (OAuth tokens, Ansible Vault passwords, SSH private keys). CPE data confirms Red Hat Ansible Automation Platform 2, 2.5, and 2.6 are affected.
RemediationAI
Apply the Red Hat patches available per vendor advisory by installing the updated EDA controller packages shipped in RHSA-2026:28492 (https://access.redhat.com/errata/RHSA-2026:28492) and RHSA-2026:28497 (https://access.redhat.com/errata/RHSA-2026:28497) for Ansible Automation Platform 2.5 and 2.6; exact fix versions should be taken from those errata. Until patching is possible, restrict EDA controller access to the minimum trusted operator set (since any authenticated EDA user can exploit this) and front the websocket endpoint with a reverse proxy that blocks /api/eda/ws/ansible-rulebook from non-operator network segments, accepting the trade-off that legitimate distributed rulebook workers in those segments will lose connectivity. Rotate all credentials managed by EDA - OAuth tokens, vault passwords, and SSH keys - after patching, on the assumption that any pre-patch user could have already harvested them.
Server-side request forgery in the Red Hat Ansible Automation Platform 2 Controller's HashiCorp Vault credential plugin
Arbitrary file write in pulpcore's FilesystemExport feature allows an authenticated administrator to escape the intended
mTLS authentication bypass in the Red Hat Ansible Automation Platform (AAP) Gateway Envoy proxy allows unauthenticated r
Arbitrary command execution in ansible-core allows an attacker who controls a collection source URI to run commands on a
Local code execution in the Visual Studio Code Ansible (Lightspeed) extension lets a malicious project run arbitrary she
Credential exfiltration via SSRF in AWX's GitHub webhook status callback affects Red Hat Ansible Automation Platform 2:
SSRF vulnerabilities in AWX notification backends (webhook, Mattermost, Rocket.Chat, and Grafana) allow an authenticated
Remote code execution in galaxy_ng's legacy role import API (v1) allows an authenticated user controlling a git reposito
Path traversal in AWX's project_archive action plugin allows arbitrary file writes to execution node filesystems outside
Incomplete RBAC authorization in AWX's websocket event consumer exposes real-time job stdout to any authenticated user,
Server-side request forgery in galaxy_ng, the Ansible Galaxy server plugin for Pulp, allows authenticated users holding
Container privilege escalation in Red Hat Ansible Automation Platform 2 allows non-root users within affected container
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today