CVE-2026-84470

A permission-check inconsistency in Ansible Automation Platform 's automation-controller (AWX) allows an execution-placement authorization bypass . The Bulk Job Launch API (POST /api/v2/bulk/job_launch/) validates requested instance_groups at only a read-level permission, whereas the standard sin...