VYPR
Moderate severity6.5NVD Advisory· Published Jul 22, 2026

awx: websocket EventConsumer missing authorization for inventory_update_events, project_update_events, and system_job_events allows cross-organization stdout disclosure

CVE-2026-16544

Description

awx: websocket EventConsumer missing authorization for inventory_update_events, project_update_events, and system_job_events allows cross-organization stdout disclosure

Affected products

1

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.