The vulnerability allows an authenticated user who can manage a constructed inventory and has read‑only access to an inventory in another organization to attach that foreign inventory as input. During synchronization the controller copies every host, host variable and secret from the source inventory into the attacker’s inventory, and because the attacker administers the constructed inventory they can subsequently issue ad‑hoc commands against the cloned hosts. This results in cross‑tenant disclosure of inventory data and secrets and the ability to execute code on another tenant’s managed hosts.

Red Hat Ansible Automation Platform 2.4 on EL8 and EL9, and 2.6 on EL9. The affected components are the automation‑controller and its container handling constructed inventory input attachments. The flaw exists in the endpoint that processes input_inventories for constructed inventories.

The CVSS score of 9.6 indicates critical severity. The EPSS score is not available, but the vulnerability requires only authenticated access and a minimal privilege set (read‑only and inventory administrator) making exploitation feasible in typical environments. This vulnerability is not currently listed in the CISA KEV catalog. The most likely attack vector is the REST API used to attach inventories; any user with the ability to administer a constructed inventory can exploit the flaw.