CVE-2026-94416: Aap-gateway: aap-gateway: authorization bypass via workload identity token forgery
An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an authenticated administrator to create a new service key for the Controller service cluster. Because service-key creation is not restricted to the installer-provisioned provisioning path, an administrator-issued key is cryptographically indistinguishable from a legitimate one and can be used to forge a service-authentication token that impersonates the Controller service. Combined with the gateway OIDC workload-identity endpoint (enabled via FEATUREOIDCWORKLOADIDENTITYENABLED), the attacker can drive the gateway to sign Workload Identity Tokens (WITs) for arbitrary Controller workloads. A downstream resource server such as HashiCorp Vault that trusts the gateway OIDC key will accept the forged WIT and return the AAP credentials bound to that workload, disclosing secrets beyond the attacker's authorization boundary.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated AAP gateway administrator is required. The attacker must be able to create a service key for the Controller service cluster and use it to impersonate the Controller service.
What configuration makes this issue exploitable?
The gateway OIDC workload-identity endpoint must be enabled through FEATURE_OIDC_WORKLOAD_IDENTITY_ENABLED. A downstream resource server must also trust the gateway OIDC signing key and expose credentials for a Controller workload.
What is the likely impact on downstream systems?
An attacker can obtain Workload Identity Tokens for arbitrary Controller workloads. A trusting resource server, such as HashiCorp Vault, may accept those forged tokens and disclose the AAP credentials associated with the targeted workload.
How can exposure be reduced if a fix cannot be applied immediately?
Disable the gateway OIDC workload-identity endpoint by disabling FEATURE_OIDC_WORKLOAD_IDENTITY_ENABLED. Also review which downstream resource servers trust the gateway OIDC key and limit or remove that trust where possible.