CVE-2026-71460
Awaiting Analysis Awaiting Analysis - Queue

Red Hat Subscription Manager License Info Exposure

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: redhat-SADP

Description
/api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, instance counts) returned to any authenticated user. The superuser/auditor gate only covers project_base_dir/project_local_paths/custom_virtualenvs, not license_info. Enables social engineering against Red Hat support and estate sizing reconnaissance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-24
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-71460
EUVD
EUVD-2026-85534

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
red_hat ansible_automation_platform to 2.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-71460 is a vulnerability in Red Hat Ansible Automation Platform where the /api/v2/config/ endpoint is only protected by authentication. This allows any authenticated user to access sensitive license information such as account numbers, subscription IDs, pool IDs, SKUs, support levels, and instance counts. The issue occurs because authorization checks are incomplete and do not cover the license_info block.

Detection Guidance

To detect this vulnerability, check if the /api/v2/config/ endpoint is accessible to authenticated users and if it exposes license_info data. Use curl commands like: curl -k -u username:password https://<target>/api/v2/config/ to test access. Verify if sensitive fields such as account_number, subscription_id, or pool_id are returned in responses.

Impact Analysis

This vulnerability enables social engineering attacks against Red Hat support teams and allows attackers to gather information about Red Hat estates for reconnaissance. Attackers could use exposed account details to impersonate users or manipulate support interactions. The impact is limited to confidentiality as integrity and availability are unaffected.

Mitigation Strategies

Apply the security update RHSA-2026:71113 for Red Hat Ansible Automation Platform 2.6 on RHEL 10 and RHEL 9. Restrict access to the /api/v2/config/ endpoint by implementing stricter authorization controls beyond authentication. Monitor Red Hat advisories for further updates or patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-71460. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart