Template Injection vulnerability in the Git metadata fields (branch, tag, commit, refspec) of the EDA project creation process in the Ansible Automation Platform. The flaw occurs because user inputs are directly passed to Ansible Jinja2 templates and evaluated without proper sanitization. An attacker can inject expressions such as {{ lookup('file', '/etc/passwd') }} or {{ lookup('lines','id') }} that are executed during project synchronization. This results in arbitrary command execution and file disclosure on the EDA worker. In OpenShift environments, the attacker can retrieve the service account token used by the worker pod and escalate access within the cluster.