# CVE-2026-76648

Authenticated AWX users can copy JobTemplates without read checks, risking credential exposure and RCE.

- Page: https://www.vulneraibility.com/cve/CVE-2026-76648
- CVSS: 8.5
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.41% (percentile 35.7)
- CISA SSVC: exploitation none, automatable no, technical impact partial (assessed 2026-09-26)
- Weakness: CWE-862
- Published: 2026-09-23

## Affected

- AWX (awx)
- Red Hat Ansible Automation Platform / Ansible Tower

## Impact

Authenticated users can create/copy JobTemplates they cannot read, exposing credentials and enabling remote job execution/RCE.

## Action

Immediate action required

## Recommendation

Apply vendor update immediately; restrict AWX access and audit/rotate affected templates/credentials.

## References

- [advisory] https://access.redhat.com/errata/RHSA-2026:71177
- [other] https://access.redhat.com/security/cve/CVE-2026-76648
- [other] https://bugzilla.redhat.com/show_bug.cgi?id=2519720

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.