CVE-2026-84475

automation-controller: InventorySource.sourcevars lacks preventsearch, enabling zero-privilege cross-tenant extraction of inline inventory-plugin credentials via the credentialtypes FieldLookupBackend count-oracle...