Ansible Automation Platform Gateway: double-slash gateway_path lets an admin plant a credential-harvesting route

Impact

The AAP Gateway accepts a gateway_path beginning with a double slash when creating a route, which allows a misleading route that shadows a legitimate path. An administrator - malicious, or socially engineered into pasting a route definition - can stand up a honey-pot endpoint that intercepts and exfiltrates the credentials users submit to it, giving persistent access that survives the revocation of that administrator's own permissions. For an operator whose fleet automation and secrets flow through AAP, a backdoor route is a credential tap on the control plane rather than a single-host problem. Requires administrative route-creation rights, so this is an insider and backdoor-persistence issue, not a path for an ordinary tenant.

Who can reach it

Authenticated AAP administrator with permission to create gateway routes. No unauthenticated or tenant-level path.

What to do

Apply the Gateway errata for your release (RHSA-2025:21768 / 21775, and RHSA-2025:23069 / 23131 for 2.6) and restart the gateway. Independently, audit existing routes for a gateway_path with a leading double slash, remove any you did not create deliberately, and rotate credentials that could have been submitted through one.

References

Related entries

• ansible-core: symlinked ~/.ssh lets an unprivileged user on a managed node escalate to rootCVE-2026-123037 · ansible-core user module (generate_ssh_key symlink handling)Medium
• JumpServer: Jinja2 injection in Applet Host fields executes commands on the control nodeCVE-2026-44845 · JumpServer (Applet Host deployment, Jinja2 template injection)Medium
• ansible-core git module: repository URL starting with a dash is parsed as a git option, enabling command executionCVE-2026-84503 · ansible-core (ansible.builtin.git module)Medium
• GlusterFS (glusterd management): An authenticated TLS client can use gluster cli --remote-host to add itself to theCVE-2018-10841 · GlusterFS (glusterd management)Medium
• Intel SPS (HECI subsystem compartmentalisation): Insufficient compartmentalisation in the HECI interfaceCVE-2021-0060 · Intel SPS (HECI subsystem compartmentalisation)Medium
• Dell CloudLink (cluster component exception handling): A highly privileged remote attacker performs unauthorizedCVE-2024-38482 · Dell CloudLink (cluster component exception handling)Medium