CVE-2026-18141
Advisory lineage Upstream: 0 Downstream: 1
Downstream
Awaiting Analysis
Published: 31 Jul 2026, 15:34
Last modified:04 Aug 2026, 21:42
Vulnerability Summary
Overall Risk (default)
medium
33/100 CVSS Score
8.2 HIGH
v3.1 (cve.org)
EPSS Score
0.31% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
31 Jul 2026, 15:34
Published
Vulnerability first disclosed
04 Aug 2026, 21:42
Last Modified
Vulnerability information updated
Description
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible (EDA). An unauthenticated remote attacker can bypass mutual Transport Layer Security (mTLS) authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP Subject header. The system also inadvertently discloses the expected certificate subject in error messages, which simplifies the attack. This vulnerability allows an attacker to inject arbitrary events into EDA, potentially triggering automated workflows.
CVSS Metrics
- v3.1•HIGH•Score: 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
EPSS Trends
Current EPSS score: 0.31%• Percentile: 24%
Techniques & Countermeasures
- CWE-295•Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.