CVE-2026-79717

CVE-2026-79717 is a blind SSRF in galaxy_ng , the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions can set a namespace avatar URL to an arbitrary address (internal networks, loopback, or cloud metadata endpoints). A background worker fetches that ...