Ansible AWX: notification backends allow SSRF from the control node and leak webhook credentials

Impact

Notification template URLs are used as direct HTTP request targets with no check against private, loopback or reserved ranges, so an organization notification administrator can make the AWX control node issue requests to anything it can reach. That node normally sits on the management network with routes to BMC and Redfish endpoints, cluster APIs and cloud metadata services that no tenant can reach directly. Two credential leaks compound it: the webhook backend follows redirects and resends its configured Basic Authentication credentials to the redirect target even when the host changes, and the Grafana backend puts its API key in the Authorization header to whatever URL is configured. This is request forgery and credential theft from the automation control plane, not code execution on it.

Who can reach it

Authenticated AWX user holding organization notification-administrator rights (enough to create or edit a notification template), over the network. No access to the AWX host itself.

What to do

Apply the Ansible Automation Platform errata for your stream - RHSA-2026:59135 and RHSA-2026:59136 cover AAP 2.5 on RHEL 8/9 and 2.6 on RHEL 9 - and restart the AWX services. This is control-plane only: no GPU node is drained or rebooted. Until patched, restrict who holds notification-admin on each organization and rotate any Basic Auth or Grafana API credentials already configured in notification templates, since a leak would be silent.

References

Related entries

• Grafana Alloy: ServiceMonitor bearerTokenFile reads any file and ships it to an attacker scrape targetCVE-2026-75889 · Grafana Alloy (prometheus.operator.servicemonitors component)High
• GitLab EE: stale pipeline execution policies run CI/CD with the new group's privileges after project transferCVE-2026-81839 · GitLab EE (scheduled pipeline execution policy records, project transfer cleanup)High
• Ansible automation-controller: survey length-validation error leaks a stored password in plaintextCVE-2026-84499 · Red Hat Ansible Automation Platform automation-controller (survey password validation error)High
• GitLab EE: Duo AI troubleshooting exposes CI/CD variable values from debug job tracesCVE-2026-92470 · GitLab EE (Duo AI troubleshooting access to debug-mode job traces)High
• GlusterFS (brick, mknod): Mknod can create device nodes that point at real devices on the storage server, so a clientCVE-2018-10923 · GlusterFS (brick, mknod)High
• HashiCorp Vault: GCP secrets engine drops existing IAM Conditions when creating/updating rolesetsCVE-2023-5077 · HashiCorp VaultHigh