CVE-2026-71464
Low
Description
LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers. Schedule and WFJT Node accept --upload-pack=/bin/id as scm_branch. Currently blocked at runtime by jobs.py:1502 ValueError check (defense-in-depth), but the API validation gap means sole reliance on a task-layer guard. Refactoring that guard away would promote this to RCE.
SeverityLow
CVSS3.1
Exploit probability—
ProductAnsible Automation Platform 2.5
PublishedSep 23, 2026
First seenSep 23, 2026
Weakness typeCWE-88CWE-88
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ansible_automation_platform 2.5 | No range specified | — |
| ansible_automation_platform 2.6 | No range specified | — |
| ansible_automation_platform 2.7 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.