red-hatCVE-2026-71462

StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary absolute paths on the controller-web pod.

Medium4.1CVE-2026-71462 · Published Sep 23, 2026 · updated Sep 24, 2026

Affected versions

Package	Affected	Fixed in

Details and references

StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary absolute paths on the controller-web pod. Tenant superuser can confirm /etc/tower/SECRET_KEY, k8s service-account token, receptor sockets, ConfigMap mount points. Mainly impactful on managed AAP (ansiblecloud.com) where tenant admin != host admin.

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Severity from: no source yet
Weakness: CWE-204

More red-hat advisories

All

Date	Advisory	Severity	Fixed in
Sep 22	A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svc_rdma_sendto.c. CVE-2026-13087High8.8no fix yet	High8.8	No fix yet
Sep 22	A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. CVE-2026-94640High7.5no fix yet	High7.5	No fix yet
Sep 22	A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the LDAP ppolicy access check can occur if a... CVE-2026-90462Medium5.4no fix yet	Medium5.4	No fix yet
Sep 22	A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. CVE-2026-95619High7.7no fix yet	High7.7	No fix yet
Sep 23	A code execution flaw was found in Emacs, affecting versions prior to 31.2. CVE-2026-96442High7.8fixed in GNU Emacs 31.2	High7.8	GNU Emacs 31.2
Sep 23	A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. CVE-2026-96445Medium6.8no fix yet	Medium6.8	No fix yet

Affected versions

More red-hat advisories

Critical advisories by email