CVE-2026-84718

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform automation-controller (affected versions not specified)

Description In the production configuration, the Controller trusts the client-supplied X-Forwarded-For header as the request's client IP without verifying if it originated from a trusted proxy. The system selects the leftmost header value, which can be controlled by an attacker. This allows an attacker to forge the source IP address recorded in the Controller's audit and access logs, compromising the integrity of forensic analysis and SIEM (Security Information and Event Management) attribution. This issue does not grant additional access privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.