Ansible Automation Platform EUVD-2026-85606

Requires an authenticated account with organization workflow-admin permission (delegated non-superuser role) and specifically does NOT require any role on the target instance groups - that missing check IS the vulnerability. The attacker must copy an existing WorkflowJobTemplate whose nodes are already pinned to a privileged instance group (notably the control-plane instance group); the deep-copy permission sanitizer validates only inventory, unified_job_template, and credentials while preserving instance_groups, execution_environment, and labels unchecked. Limiting factors: the attacker needs the workflow-admin role to copy and administer workflows, and a source workflow referencing a privileged/control-plane instance group must exist to be cloned. No user interaction and no non-default configuration are needed beyond a normal multi-tenant automation-controller deployment.

This is a genuine high-priority vulnerability, not a high-CVSS-but-low-risk case. The Red Hat-provided CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H = 9.9) is internally consistent with the description: the flaw is remotely reachable over the automation-controller API, needs only low privilege (an organization workflow-admin, which is a delegated non-superuser role), requires no user interaction, and the scope change (S:C) correctly reflects that a user confined to their organization escalates into the shared control-plane execution context. Because attacker-influenced automation runs inside the control plane - which holds SECRET_KEY, database credentials, and other tenants' secrets - the full C:H/I:H/A:H impact is justified. Countervailing signals: no EPSS score, no CISA KEV listing, and no public exploit are present in the input, so exploitation probability data is absent rather than low. The CWE-862 (missing authorization) root cause combined with a purely logic-level bug (no memory corruption, deterministic to trigger) makes this highly automatable once understood. Note the tag 'Authentication Bypass' conflicts with CWE-862, which is an AUTHORIZATION flaw - verify categorization. No fix version is stated in the provided data; consult Red Hat advisory RHSA/errata for the patched automation-controller release.

An attacker holding only an organization-level workflow-admin role (no permission on any instance group) copies an existing WorkflowJobTemplate; the deep-copy sanitizer re-validates inventory, job template, and credentials but silently preserves the original nodes' instance_groups, so the clone remains pinned to privileged groups. The attacker, now administrator of the copy, launches it against the control-plane instance group and executes attacker-influenced automation in the control-plane execution context, bypassing the InstanceGroup use_role boundary. No public exploit code is identified in the provided data, but the attack is deterministic and requires no special tooling.