CVE-2026-71363

A flaw was found in AWX. The debug API endpoints /api/debug/taskmanager/, /api/debug/dependencymanager/, /api/debug/workflowmanager/ are registered unconditionally in the URL configuration and use AllowAny permission class with ignoremodelpermissions=True. This allows an unauthenticated remote...