Skip to content
Threat Feed
Subscribe

Product

Event-Driven Ansible

1 brief RSS
high advisory

CVE-2026-12383: Event-Driven Ansible Server Authentication Bypass

A flaw in the Event-Driven Ansible (EDA) server's ExternalEventStreamViewSet allows an unauthenticated attacker to bypass mTLS authentication by spoofing the Subject HTTP header, enabling injection of arbitrary events into mTLS-protected streams and triggering downstream automation actions, while also leaking the expected certificate Distinguished Name in 403 error responses.

Event-Driven Ansible vulnerability network ansible
1r 2t 1c