An argument-injection vulnerability exists in the Red Hat Ansible Automation Platform that allows authenticated superusers to manipulate command-line arguments, posing a risk to control-plane integrity.

This is an argument-injection flaw (CWE-88) occurring because the system-job template launch endpoint fails to validate integer constraints on the days variable. An authenticated user with superuser privileges can exploit this to inject arbitrary arguments into the awx-manage process, potentially altering the module search path.

While the CVSS score is 6.6, which is categorized as medium, the ability for an authenticated superuser to influence the control-plane execution environment represents a significant security risk. Successful exploitation allows for the modification of the internal process search path, which could be leveraged to facilitate unauthorized code execution if combined with other vulnerabilities. This impacts the overall integrity and availability of the automation controller, potentially leading to unauthorized system configuration changes.

Immediate Action: Update your Red Hat Ansible Automation Platform installation to the versions specified in the enrichment data (4.6.33-1.el8ap, 4.6.33-1.el9ap, 4.7.17-1.el9ap, 1789673739, or 1789580684) depending on your specific environment and release stream.

Proactive Monitoring: Monitor system-job execution logs for unusual argument patterns or unexpected service behaviors associated with the awx-manage process.

Compensating Controls: Ensure that access to the automation-controller system-job subsystem is strictly restricted to trusted personnel, as the vulnerability requires superuser privileges to trigger.

Public Exploit Available: No (exploit_available unknown).

Organizations utilizing Red Hat Ansible Automation Platform must prioritize upgrading to the patched versions provided by Red Hat. Given that this vulnerability permits argument injection into a sensitive control-plane process, applying the vendor-supplied updates is the only definitive way to eliminate the risk of process manipulation.