CVE-2026-126643

A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the operator reads the protected resource-server Secret Secret/-resource-server, key controllerresourceserversecret and copies its plaintext value into the generated AutomationController cust...

CVE-2026-126643 Aap-gateway-operator: resource-server secret exposed in plaintext in the automationcontroller custom resource

A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the operator reads the protected resource-server Secret Secret/-resource-server, key controllerresourceserversecret and copies its plaintext value into the generated AutomationController cust...

CVE-2026-126643

A cleartext storage flaw exists in the AAP Gateway Operator during the reconciliation of an AutomationController . The operator reads a protected resource-server Secret (controller_resource_server_secret) and copies its plaintext value into the spec.extra_settings (RESOURCE_SERVER.SECRET_KEY) of ...

EUVD-2026-124342

A cleartext storage flaw was found in the AAP Gateway Operator. When reconciling an AutomationController, the operator reads the protected resource-server Secret Secret/-resource-server, key controllerresourceserversecret and copies its plaintext value into the generated AutomationController cust...