Ansible AWX: notification backends allow SSRF from the control node and leak webhook credentials

Impact

Notification template URLs are used as direct HTTP request targets with no check against private, loopback or reserved ranges, so an organization notification administrator can make the AWX control node issue requests to anything it can reach. That node normally sits on the management network with routes to BMC and Redfish endpoints, cluster APIs and cloud metadata services that no tenant can reach directly. Two credential leaks compound it: the webhook backend follows redirects and resends its configured Basic Authentication credentials to the redirect target even when the host changes, and the Grafana backend puts its API key in the Authorization header to whatever URL is configured. This is request forgery and credential theft from the automation control plane, not code execution on it.

Who can reach it

Authenticated AWX user holding organization notification-administrator rights (enough to create or edit a notification template), over the network. No access to the AWX host itself.

What to do

Apply the Ansible Automation Platform errata for your stream - RHSA-2026:59135 and RHSA-2026:59136 cover AAP 2.5 on RHEL 8/9 and 2.6 on RHEL 9 - and restart the AWX services. This is control-plane only: no GPU node is drained or rebooted. Until patched, restrict who holds notification-admin on each organization and rotate any Basic Auth or Grafana API credentials already configured in notification templates, since a leak would be silent.

References

Related entries

• GlusterFS (brick, mknod): Mknod can create device nodes that point at real devices on the storage server, so a clientCVE-2018-10923 · GlusterFS (brick, mknod)High
• HashiCorp Vault: GCP secrets engine drops existing IAM Conditions when creating/updating rolesetsCVE-2023-5077 · HashiCorp VaultHigh
• NetApp ONTAP 9 role-based access control: A user holding several remote accounts with different roles performs actionsCVE-2024-21985 · NetApp ONTAP 9 role-based access controlHigh
• HashiCorp Nomad Enterprise: Jobs using the policy-override option bypass mandatory Sentinel policiesCVE-2025-3744 · HashiCorp Nomad EnterpriseHigh
• Grafana: Client path traversal + open redirectCVE-2025-4123 · GrafanaHigh
• OpenZFS (sharenfs export generation): When an NFS share is exported to IPv6 addresses via sharenfs, OpenZFS silentlyCVE-2013-20001 · OpenZFS (sharenfs export generation)High