CVE-2026-84486 Red Hat CVE debrief

Who should care

Defenders of Red Hat Ansible Automation Platform deployments, particularly those with unauthenticated access to the automation-controller, should assess exposure and prioritize remediation to prevent potential DoS attacks.

Why it matters

CVE-2026-84486 allows unauthenticated remote attackers to cause a DoS condition in Red Hat Ansible Automation Platform's automation-controller. Defenders should verify exposure, prioritize remediation, and monitor for potential issues.

• Potential DoS attacks through advisory-lock starvation
• Stalling of job dispatch for all tenants
• Consumption of controller web workers
• Verification of exposure and remediation priority

Technical summary

The automation-controller in Red Hat Ansible Automation Platform has debug views that trigger internal task, dependency, and workflow schedulers, configured to allow any user, including unauthenticated clients. These views are routed in production builds without a debug guard, allowing an attacker to acquire the cluster-wide scheduler advisory lock, starving legitimate scheduler runs and stalling job dispatch.

Defensive priority

Defenders should prioritize verifying exposure and applying remediation, focusing on restricting access to the automation-controller and ensuring proper configuration.

Recommended defensive actions

• Verify exposure by checking if the automation-controller is configured to allow unauthenticated access to debug views.
• Apply remediation by restricting access to the automation-controller and ensuring proper configuration.
• Monitor controller web workers for potential consumption issues.
• Review and update incident response plans to address potential DoS attacks.
• Perform a thorough review of system logs to identify potential exploitation attempts.
• Implement additional monitoring to detect unusual patterns of scheduler activity.
• Conduct a risk assessment to prioritize remediation efforts based on the potential impact of a DoS attack.

Evidence notes

The CVE record and source item provide details on the flaw, its impact, and affected products. Red Hat has released advisories RHSA-2026:71113, RHSA-2026:71177, and RHSA-2026:71179 addressing this issue.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.