A flaw was found in the Ansible Automation Platform automation-controller

A flaw was found in the Ansible Automation Platform automation-controller. In the shipped

production configuration, the Controller trusts the client-supplied X-Forwarded-For header as

the request's client IP without verifying that it originated from a trusted proxy, and selects

the leftmost (attacker-controlled) header value. As a result, an attacker can forge the source

IP address recorded for their requests in the Controller's audit and access logs, degrading

the integrity of forensic and SIEM attribution. The flaw does not grant additional access.