CVE-2026-12398 | Red Hat Ansible Automation Platform 2 Legacy Role Import API do_git_checkout os command injection (EUVD-2026-37124)

A vulnerability, which was classified as critical, has been found in Red Hat Ansible Automation Platform 2. Affected is the function do_git_checkout of the component Legacy Role Import API. Performing a manipulation results in os command injection. This vulnerability is reported as CVE-2026-12398. The attack is possible to be carried out remotely. No exploit exists.