CVE-2026-12398: Galaxy_ng: shell injection in legacy role import via unsanitized git ref names

Synopsis

A command injection vulnerability in galaxy_ng allows an authenticated user to achieve remote code execution on the pulp worker by crafting a git branch or tag name containing shell metacharacters. The vulnerable code path is reachable over the network but only when the GALAXY_ENABLE_LEGACY_ROLES configuration flag is set to True, which is not the default. Successful exploitation gives the attacker full read, write, and execution capability on the affected worker process. No upstream fix has been published yet; HarborGuard is tracking the advisory and will make a patched rebuild available as soon as one is released.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable legacy role import API endpoint is exposed over the network, so an attacker must be able to reach the service remotely to submit a malicious import request.

• AuthenticationRequired

  The attacker must hold at least a low-privilege authenticated account, as the import API requires a valid user session before processing any git ref.

• Victim interactionNot required

  No victim action is needed; the attacker submits the malicious git ref name directly through their own authenticated API call.

• Attack complexityDetail

  Exploitation is rated High complexity, meaning the attacker must control an external git repository and craft a branch or tag name with shell metacharacters, but no race condition or memory-layout dependency is involved.

Blast Radius

• Reads any files accessible to the pulp worker process, including secrets, credentials, and configuration data stored on the host.
• Writes or overwrites files on the worker host, enabling persistence mechanisms or corruption of task queues.
• Executes arbitrary OS commands on the pulp worker, allowing lateral movement within the cluster or deployment of additional payloads.
• Disrupts the pulp worker process or the broader Ansible Automation Platform job execution pipeline if the attacker chooses to crash or destabilize it.