Name: CVE-2026-71464: Improper Neutralization of Argument Delimiters in a Command
Creator: Rapid7
Published: 2026-09-23T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-71464, CWE-88, CVSS 3.1, EPSS 0.0021

LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers. Schedule and WFJT Node accept --upload-pack=/bin/id as scm_branch. Currently blocked at runtime by jobs.py:1502 ValueError check (defense-in-depth), but the API validation gap means sole reliance on a task-layer guard. Refactoring that guard away would promote this to RCE.

CVSS Details

CVSS 3.1 Base Score: 3.1
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Redhat_linux	—	Upgrade python3.12-django-ansible-baseUpgrade automation-gateway-proxy-server-debuginfoUpgrade python3-sqlparseUpgrade automation-controller-serverUpgrade automation-eda-controller-worker-servicesUpgrade automation-gateway-serverUpgrade python3.12-django-ansible-base+channel_authUpgrade python3.12-django-ansible-base+api_documentationUpgrade python3.12-django-ansible-base+rbacUpgrade python3.12-django-ansible-base+authenticationUpgrade automation-gateway-configUpgrade automation-gateway-proxyUpgrade receptorUpgrade python3.12-django-ansible-base+feature_flagsUpgrade automation-gatewayUpgrade python3.12-django-ansible-base+activitystreamUpgrade automation-controller-venv-towerUpgrade automation-eda-controller-event-stream-servicesUpgrade python3.12-django-ansible-base+redis_clientUpgrade python3.12-django-ansible-base+resource_registryUpgrade automation-controller-uiUpgrade receptor-debuginfoUpgrade automation-eda-controllerUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade automation-hubUpgrade receptor-debugsourceUpgrade automation-eda-controller-base-servicesUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade automation-gateway-proxy-debugsourceUpgrade automation-eda-controller-baseUpgrade automation-controllerUpgrade aap-metrics-utilityUpgrade python3.12-galaxy-ngUpgrade automation-gateway-proxy-serverUpgrade automation-controller-cliUpgrade automation-platform-uiUpgrade python3.12-django-ansible-base+rest_filtersUpgrade python3.12-gitpythonUpgrade receptorctlUpgrade python3.12-sqlparse	Sep 25, 2026	Sep 6, 2026

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence