EUVD-2026-124562

A flaw was found in AWX. The debug API endpoints /api/debug/taskmanager/, /api/debug/dependencymanager/, /api/debug/workflowmanager/ are registered unconditionally in the URL configuration and use AllowAny permission class with ignoremodelpermissions=True. This allows an unauthenticated remote...

CVE-2026-71363

A flaw in AWX allows an unauthenticated remote attacker to access specific debug API endpoints, including /api/debug/task_manager/ , /api/debug/dependency_manager/ , and /api/debug/workflow_manager/ . These endpoints are registered unconditionally in the URL configuration and utilize the AllowAny...