Skip to content
Fencer Vulns
medium 6.8

CVE-2026-94416 json

Aap-gateway: aap-gateway: authorization bypass via workload identity token forgery

published 2026-09-24 46 d ago modified 2026-10-21 18 d ago also EUVD-2026-85867

cvss
6.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 45%
public exploits
0
none known

Summary

An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an authenticated administrator to create a new service key for the Controller service cluster. Because service-key creation is not restricted to the installer-provisioned provisioning path, an administrator-issued key is cryptographically indistinguishable from a legitimate one and can be used to forge a service-authentication token that impersonates the Controller service. Combined with the gateway OIDC workload-identity endpoint (enabled via FEATURE_OIDC_WORKLOAD_IDENTITY_ENABLED), the attacker can drive the gateway to sign Workload Identity Tokens (WITs) for arbitrary Controller workloads. A downstream resource server such as HashiCorp Vault that trusts the gateway OIDC key will accept the forged WIT and return the AAP credentials bound to that workload, disclosing secrets beyond the attacker's authorization boundary.

Patch / fix

  • Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 0:2.6.20261019-1.el9ap
  • Red Hat Red Hat Ansible Automation Platform 2.7 1792429216

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-94416 updated cvss 6.8

aap-gateway: aap-gateway: authorization bypass via workload identity token forgery

  • Red Hat Ansible Automation Platform 2 ansible-automation-platform-25/gateway-rhel8, ansible-automation-platform-26/gateway-rhel9
    affected: workaround, no fix available, no fix planned “Out of support scope”
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-gateway-server 2.6.20261019-1.el9ap
    fixed: vendor fix RHSA-2026:87004
  • Red Hat Ansible Automation Platform 2.7 ansible-automation-platform-27/gateway-rhel9 1792429216
    fixed: vendor fix RHSA-2026:87124
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9 receptor 1.6.9-1.el9ap, molecule 26.10.0-1.el9ap, receptorctl 1.6.9-1.el9ap, ansible-lint 26.10.1-1.el9ap, ansible-rulebook 1.2.3-1.el9ap, automation-hub 4.11.15-1.el9ap, +51 more Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor 1.6.9-1.el10ap, molecule 26.10.0-1.el10ap, python-cffi 2.0.0-2.el10ap, receptorctl 1.6.9-1.el10ap, python3-cffi 2.0.0-2.el10ap, ansible-lint 26.10.1-1.el10ap, +11 more Red Hat Ansible Automation Platform 2.7 ansible-automation-platform-27/hub-rhel9 1792388670, ansible-automation-platform-27/hub-web-rhel9 1792394496, ansible-automation-platform-27/receptor-rhel9 1792139928, ansible-automation-platform-27/mcp-tools-rhel9 1792425046, ansible-automation-platform-27/controller-rhel9 1792389457, ansible-automation-platform-27/de-minimal-rhel9 1792141111, +26 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
46 d ago

Exploit prediction

0.54% chance of exploitation in the next 30 days, higher than 45% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected products

  • Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Red Hat Ansible Automation Platform 2.7
  • Red Hat Red Hat Ansible Automation Platform 2

Classification

Weakness
  • CWE-290 Authentication Bypass by Spoofing

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.