Skip to content
OpenAdvisories
High · 7.7 CVE-2026-84499 EUVD-2026-85561GHSA-fmp7-4cgr-jc56

Automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via schedule/workflowjobtemplatenode survey min/max validation error message

Published Sep 23, 2026 · Updated Nov 6, 2026 · Assigned by redhat

Description

A flaw was found in Red Hat Ansible Automation Platform's automation-
controller. Survey questions of type password are write-only and stored
encrypted, displayed only as a placeholder on read. When a schedule or
workflow job template node is revalidated against a tightened survey
specification, the controller decrypts the stored password and includes its
plaintext value in the minimum/maximum length validation error message
returned in the HTTP response. A user with the delegated JobTemplate Admin
role can tighten the survey length constraint and trigger revalidation of a
schedule or node created by another, higher-privileged user, thereby
recovering that user's stored password in plaintext.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 — —
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 — —
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 — —
Red Hat Red Hat Ansible Automation Platform 2.6 — —
Red Hat Red Hat Ansible Automation Platform 2.7 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Red Hat Ansible Automation Platform Inside 2 receptor 1.6.8-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.7.17-1.el9ap RHSA-2026:71113
Red Hat Ansible Automation Platform Developer 2 python-sqlparse +1 0.6.0-1.el10ap RHSA-2026:71113
Red Hat Ansible Automation Platform Developer 2 python3.12-sqlparse 0.6.0-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform Developer 2 receptor 1.6.8-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 automation-controller +3 4.7.17-1.el9ap RHSA-2026:71113
Red Hat Ansible Automation Platform 2 automation-controller-venv-tower 4.6.33-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 automation-gateway-proxy-server 2.5.10-8.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 automation-gateway-server 2.5.20260923-1.el8ap RHSA-2026:71114
Red Hat Ansible Automation Platform 2 automation-platform-ui 2.6.14-1.el9ap RHSA-2026:71113
Red Hat Ansible Automation Platform 2 python-sqlparse +1 0.6.0-1.el10ap RHSA-2026:71113
Red Hat Ansible Automation Platform 2 python3.12-gitpython 3.1.60-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 python3.12-sqlparse 0.6.0-1.el8ap RHSA-2026:71114, RHSA-2026:71113
Red Hat Ansible Automation Platform 2 receptor 1.6.8-1.el8ap RHSA-2026:71114, RHSA-2026:71113

Advisories 3

References