Is CVE-2026-84713 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-84713 being exploited in the wild.

How severe is CVE-2026-84713?

Medium severity, with a CVSS score of 6.5, published 23 September 2026.

Is there a fix for CVE-2026-84713?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-84713 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-84713?

Check whether you run Red Hat Ansible Automation Platform. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-84713: Red Hat Ansible Automation Platform Controller information disclosure in notification subsystem

CVE-2026-84713 · Severity: medium · CVSS 6.5 · Published 2026-09-23

Red Hat Ansible Automation Platform's notification system exposes sensitive credential information, such as PagerDuty service keys and messaging platform tokens, through an authentication bypass in the API. A low-privileged user can extract these secrets character-by-character across different organizations by exploiting inadequate permission checks on relational filters. This allows attackers to gain access to external communication services and potentially compromise integrated systems.

Technologies: Red Hat Ansible Automation Platform. Vendors: Red Hat.

Quick answers

Is CVE-2026-84713 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-84713 being exploited in the wild.
How severe is CVE-2026-84713?: Medium severity, with a CVSS score of 6.5, published 23 September 2026.
Which products and versions are affected?: Red Hat Ansible Automation Platform.
Is there a fix for CVE-2026-84713?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-84713 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-84713?: Check whether you run Red Hat Ansible Automation Platform. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in the automation-controller notification subsystem where NotificationTemplate.notification_configuration is protected, but its recipient value is copied in clear text to the unprotected Notification.recipients field. The credential-types endpoint is listable by any authenticated user, and the API filter backend traverses object relations without per-hop authorization checks, allowing an authenticated attacker to use relational filter boolean count-oracles to recover secrets. An attacker with minimal privileges can leak recipient values (including PagerDuty keys and bearer tokens) across tenants and organizations.

Affected products

Red Hat Ansible Automation Platform

Timeline

2026-09-23: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.