CVE-2026-12382 | Red Hat Ansible Automation Platform mTLS Route Configuration config/headers.conf remove_request_headers Subject injection

A vulnerability classified as critical was found in Red Hat Ansible Automation Platform. The affected element is the function remove_request_headers of the file config/headers.conf of the component mTLS Route Configuration. Executing a manipulation of the argument Subject can lead to injection.

This vulnerability is registered as CVE-2026-12382. It is possible to launch the attack remotely. No exploit is available.