CVE-2026-12564— Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf
Quick assessment
Affected
Red Hat Red Hat Ansible Automation Platform 2
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 AAP Controller 的 HashiCorp Vault 凭证插件中发现了一个安全漏洞。awx_plugins/credentials/hashivault.py 文件中的 kubernetes_auth() 函数会读取控制器 Pod 的 Kubernetes 服务账户令牌，并在测试使用 kubernetes_role 认证的 HashiCorp Vault 密钥查找凭证时，将该令牌发送至攻击者控制的 URL。拥有凭证创建权限的经过身份验证的攻击者可借此窃取下述令牌，从而获得对控制平面命名空间的 Kub
Affected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2 | any |
affected |
any |
affected | ||
any |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-12564
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashivault.py reads the controller pod's Kubernetes service account token and sends it to an attacker-controlled URL when a HashiCorp Vault Secret Lookup credential with kubernetes_role authentication is tested. An authenticated attacker with credential-creation privileges can exfiltrate the service account token, gaining Kubernetes API access to the control plane namespaces with full pod CRUD and secret read permissions, including database credentials and the Django SECRET_KEY.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
II. Public POCs for CVE-2026-12564
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-12564
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-12564 (2)
Same Patch Batch · Red Hat · 2026-08-18 · 14 CVEs total
| CVE-2026-66780 | 9.9 CRITICAL | Submariner-operator: submariner-operator: flat broker trust model grants every spoke full |
| CVE-2026-18963 | 9.1 CRITICAL | Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentia |
| CVE-2026-66793 | 8.8 HIGH | Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary containe |
| CVE-2026-75924 | 8.7 HIGH | Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants clust |
| CVE-2026-66783 | 8.2 HIGH | Submariner-operator: submariner-operator: arbitrary image override enables privileged code |
| CVE-2026-66782 | 7.8 HIGH | Submariner-operator: submariner-operator: broker api bearer token stored cleartext in cr s |
| CVE-2026-71365 | 7.7 HIGH | Awx: webhook status callback ssrf leaks the git pat |
| CVE-2026-15571 | 7.3 HIGH | Keycloak-services: keycloak-services: predictable account-linking hash enables account tak |
| CVE-2026-66781 | 6.5 MEDIUM | Submariner-operator: submariner-operator: ipsec psk stored cleartext in submariner cr spec |
| CVE-2026-75032 | 6.3 MEDIUM | Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder |
| CVE-2026-75485 | 5.5 MEDIUM | Must-gather: must-gather: cluster proxy object dumped raw, bypassing inspect redaction of |
| CVE-2026-73834 | 5.5 MEDIUM | Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redact |
| CVE-2026-19608 | 5.3 MEDIUM | Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy |
IV. Related Vulnerabilities
Same product: Red Hat Ansible Automation Platform 2
-
CVE-2026-79717
Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_url wi -
CVE-2026-19730
Podman: podman: quadlet install --replace non-truncating wri -
CVE-2026-44191
Ansible-lightspeed: visual studio code ansible lightspeed ex -
CVE-2026-44187
Ansible-lightspeed: ansible lightspeed extension for visual -
CVE-2026-44192
Ansible-lightspeed: ansible lightspeed mcp server: remote co
Same vendor: Red Hat
-
CVE-2026-80185
Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent- -
CVE-2026-80186
Bluez: stack overflow in name2utf8 causes dos and potential -
CVE-2026-80101
Gimp: multiple heap out-of-bounds reads in xwd loader from u -
CVE-2026-77680
Libsoup3: libsoup: quadratic cpu denial of service in http r -
CVE-2026-79992
Emacs: local shell command injection through the user field
Same weakness: CWE-918
-
CVE-2026-45019
Chainlit: SSRF via MCP SSE and streamable-http transports al -
CVE-2026-79788
Dradis Community Edition 5.1.0 through 5.2.0 Server-Side Req -
CVE-2026-76193
Adobe Campaign Classic (ACC) | Server-Side Request Forgery ( -
CVE-2026-70548
SSRF In CocoaPods Via JFrog Artifactory External Dependency -
CVE-2026-70551
Server-Side Request Forgery Via VCS remote download in JFrog
V. Comments for CVE-2026-12564
No comments yet