Chris Meyers

**Name of the Vulnerable Software and Affected Versions** AAP Controller (affected versions not specified) **Description** A flaw exists in the HashiCorp Vault credential plugin of the AAP Controller. When a HashiCorp Vault Secret Lookup credential using `kubernetes role` authentication is tested, the `kubernetes auth()` function in `awx plugins/credentials/hashivault.py` reads the Kubernetes service account token of the controller pod and transmits it to an external URL controlled by an attacker. An authenticated attacker with privileges to create credentials can exfiltrate this token to obtain Kubernetes API access to control plane namespaces. This access allows full pod CRUD (Create, Read, Update, Delete) operations and the ability to read secrets, including database credentials and the `SECRET KEY` used by Django. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Event-Driven Ansible (EDA) server (affected versions not specified) **Description** The Event-Driven Ansible (EDA) server contains a flaw in the `ExternalEventStreamViewSet` due to permissive access controls. The system relies exclusively on the `Subject` HTTP header for mTLS (mutual Transport Layer Security) authentication—a process where both client and server verify each other's certificates—without confirming that the header was sent by a trusted proxy. Furthermore, the 403 error response body leaks the expected certificate Distinguished Name. An attacker capable of reaching the API endpoint with a spoofed `Subject` header can inject arbitrary events into protected event streams to trigger downstream automation actions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ansible Automation Platform (affected versions not specified) **Description** A flaw in the AAP Gateway Envoy proxy configuration allows an unauthenticated remote attacker to bypass mTLS authentication. The non-mTLS route to EDA event streams fails to remove the `Subject` HTTP header from client requests. By injecting a spoofed `Subject` header that matches a legitimate client certificate Distinguished Name (DN), an attacker can inject arbitrary events into protected EDA event streams. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Event-Driven Ansible (affected versions not specified) **Description** A missing authorization issue exists in the websocket API. The '/api/eda/ws/ansible-rulebook' endpoint fails to verify user permissions when processing Worker messages. This allows any authenticated user to send a forged message containing an arbitrary `activation id` to obtain plaintext credentials associated with that activation, such as OAuth tokens, vault passwords, and SSH keys. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** galaxy ng (affected versions not specified) **Description** A command injection issue exists in the legacy role import API (v1) where the `do git checkout()` function interpolates unsanitized git ref names, such as branch or tag names, into shell commands executed via `subprocess.run()` with `shell=True`. An authenticated user with control over a git repository can use shell metacharacters in a branch or tag name to achieve remote code execution on the pulp worker. This endpoint is only accessible when the `GALAXY ENABLE LEGACY ROLES` variable is set to True. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Set `GALAXY ENABLE LEGACY ROLES` to False to disable the vulnerable legacy role import API.

**Name of the Vulnerable Software and Affected Versions** Ansible aap-gateway (affected versions not specified) **Description** A flaw was found in the Ansible aap-gateway, where concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition requests against the proxy. This issue potentially allows a less privileged user to obtain the JWT of a greater privileged user, enabling the server to be jeopardized. A user session or confidential data might be vulnerable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.