# CVE-2026-123084: Python-pulpcore: pulpcore: header content guard jq filter exposes the content-app environment Status: published. Published: 2026-11-10. Updated: 2026-11-12. An **expression language injection** has been found in the HeaderContentGuard.permit function in publication.py of the content guard in the **Pulpcore** package. The guard is supposed to check a value in a request header. It saves a jq filter and runs that filter against the header when a client asks for content. The filter is not limited to the header, and jq's env builtin also returns the environment of the content process. A low-privileged network attacker or user who can create a header content guard and attach it to a distribution can save a filter that reads that environment. The content request is allowed or denied according to the filter result. Repeating the request lets that attacker or user recover the environment, including Pulp settings held there, such as the Django secret key or the database password. ## Remediation - workaround: Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. (source: CNA: redhat) ## Affected products and versions - Red Hat / Red Hat Ansible Automation Platform 2 (ansible-automation-platform-24/hub-rhel8): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Ansible Automation Platform 2 (ansible-automation-platform-25/hub-rhel8): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Ansible Automation Platform 2 (ansible-automation-platform-26/hub-rhel9): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Ansible Automation Platform 2 (ansible-automation-platform-27/hub-rhel9): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Ansible Automation Platform 2 (python3.11-pulpcore): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Ansible Automation Platform 2 (python3.12-pulpcore): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Ansible Automation Platform 2 (python3x-pulpcore): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Ansible Automation Platform 2 (python-pulpcore): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Satellite 6 (python3.12-pulpcore): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Satellite 6 (python-pulpcore): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Update Infrastructure 4 for Cloud Providers (python-pulpcore): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Update Infrastructure 4 for Cloud Providers (python-pulpcore-client): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Update Infrastructure 5 (python-pulpcore-client): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Update Infrastructure 5 (rhui5/rhua-rhel9): Version range not reported. Source: CNA: redhat - Red Hat / Red Hat Update Infrastructure 5 (rhui5/rhua-tp-rhel9): Version range not reported. Source: CNA: redhat ## Severity and prioritization - CVSS 3.1: 6.5 (medium); CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; source: CNA: redhat - CVSS 3.1: 6.5 (medium); CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; source: NVD: secalert@redhat.com - CISA KEV: No listing in collected sources - EPSS: 0.31% as of 2026-11-12; percentile 24.44% - SSVC: exploitation none; automatable no; technical impact partial; source ADP: CISA-ADP - Weaknesses: CWE-917 ## Exploit evidence No exploit evidence in collected sources. This is not proof of no exploitation. ## References - https://access.redhat.com/security/cve/CVE-2026-123084 (CNA: redhat; vdb-entry, x_refsource_REDHAT) - https://bugzilla.redhat.com/show_bug.cgi?id=2567260 (CNA: redhat; issue-tracking, x_refsource_REDHAT) - https://access.redhat.com/security/cve/CVE-2026-123084 (secalert@redhat.com) - https://bugzilla.redhat.com/show_bug.cgi?id=2567260 (secalert@redhat.com) ## Provenance - CNA: redhat: https://www.cve.org/CVERecord?id=CVE-2026-123084; retrieved 2026-11-12; source updated 2026-11-12 - NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-123084; retrieved 2026-11-11; source updated 2026-11-10 - FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2026-123084; retrieved 2026-11-12; source updated Not reported Revision: f04bb3bf400a4c4e803e62f43c238b8934709e47555504f6f5050915ed01b6a8 Canonical: https://y2.dev/cve/CVE-2026-123084 ## Agent and API access Public CVE pages, Markdown, and JSON are free to read without an account or API key. - Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end. - WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers. - Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}. - Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer . Setup: https://y2.dev/docs/api/create-key. - x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402. - OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json. Collected public records only. Check source status for coverage and freshness.