VDB
CVE-2026-84706
CVE-2026-84706
PUBLISHED
CVSS 7.6 HIGH
Reported by redhat · Published September 23, 2026
A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable injector validates variable names against a deny-list (an ANSIBLE_* prefix check plus a fixed ENV_BLOCKLIST) that omits process-hijacking loader variables such as BASH_ENV, ENV, LD_PRELOAD, LD_LIBRARY_PATH, PYTHONSTARTUP and GIT_SSH_COMMAND. Combined with the credential file injector, a privileged user can write an attacker-controlled script into the execution environment and point BASH_ENV at it, obtaining arbitrary code execution inside the execution-environment container for any job that attaches a credential of that type.
Risk Scores
CVSS 3.1
7.6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:4.6.33-1.el8ap |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:4.6.33-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:4.7.17-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1789673739 |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | 1789580684 |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:4.6.33-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:4.7.17-1.el9ap, 0:4.7.17-1.el9ap, 0:4.7.17-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1789673739, 1789673739 |
| Red Hat | Red Hat Ansible Automation Platform 2 | |
| Red Hat | Red Hat Ansible Automation Platform 2 | |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:4.6.33-1.el8ap, 0:4.6.33-1.el8ap |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | 1789580684, 1789580684 |
Timeline
- Sep 23, 2026 Coalition ESS Score
- Sep 23, 2026 CVE Published
- Sep 24, 2026 EPSS Score
- Sep 24, 2026 Distribution Patch
- Sep 24, 2026 Security Advisory
- Sep 26, 2026 EPSS Score
- Sep 30, 2026 EPSS Score
- Oct 2, 2026 EPSS Score
- Oct 6, 2026 EPSS Score
- Oct 9, 2026 EPSS Score
- Oct 13, 2026 EPSS Score
- Oct 15, 2026 EPSS Score
References
- RHSA-2026:71113 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:71114 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:71177 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:71179 vendor-advisoryx_refsource_REDHAT
- vdb-entryx_refsource_REDHAT
- RHBZ#2527187 issue-trackingx_refsource_REDHAT