REDHAT-BUG-2512375: Low severity Red Hat Automation Controller vulnerability
A flaw was found in automation-controller. RunAdHocCommand.buildargs() appends the limit field as a bare positional argument instead of using the -l flag prefix as RunJob does. An attacker can set the limit field to a value beginning with a dash, which is then parsed as an ansible CLI option. The impact is currently limited to short-circuit flags such as --version and --help because the injected element displaces the required pattern positional argument.
Affected Software
Event History
Frequently Asked Questions
What input must an attacker control to trigger this issue?
The attacker must be able to set the limit field for an ad hoc command to a value beginning with a dash.
Can the issue be used to inject arbitrary Ansible command-line options?
The currently identified impact is limited to short-circuit options such as --version and --help. The injected value displaces the required pattern positional argument, preventing broader option injection in the described scenario.