Ansible Automation Platform Developer (Redhat) - vulnerabilities (CVEs)

60 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2026-09-24. Vendor: Redhat.

CVEs of Ansible Automation Platform Developer

CVE-2026-90959 - CVSS 8.1 (high), 2026-09-24: A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter that allows users with file repository privileges…
CVE-2026-94416 - CVSS 6.8 (medium), 2026-09-24: An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an authenticated administrator to create a new…
CVE-2026-84724 - CVSS 6.6 (medium), 2026-09-23: An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint…
CVE-2026-84720 - CVSS 6.5 (medium), 2026-09-23: A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode.ancestor_artifacts database column, which stores the raw merged…
CVE-2026-84718 - CVSS 4.3 (medium), 2026-09-23: A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configuration, the Controller trusts the client-supplied…
CVE-2026-84717 - CVSS 5.3 (medium), 2026-09-23: A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center webhook receiver skips HMAC signature…
CVE-2026-84716 - CVSS 6.6 (medium), 2026-09-23: A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an execution/hop node's install bundle,…
CVE-2026-84712 - CVSS 5.3 (medium), 2026-09-23: A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ (ApiV2PingView, AllowAny) over-serializes…
CVE-2026-84719 - CVSS 9.9 (critical), 2026-09-23: A flaw was found in the Ansible Automation Platform automation-controller. When a WorkflowJobTemplate is copied, the deep-copy permission sanitizer validates…
CVE-2026-84714 - CVSS 7.1 (high), 2026-09-23: A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function uses two regular expressions to reject user-supplied…
CVE-2026-84706 - CVSS 7.6 (high), 2026-09-23: A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable injector validates variable names…
CVE-2026-75884 - CVSS 9.1 (critical), 2026-09-23: A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing…
CVE-2026-84691 - CVSS 8.7 (high), 2026-09-23: A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an…
CVE-2026-84683 - CVSS 8.7 (high), 2026-09-23: A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command, project update, and inventory update…
CVE-2026-84499 - CVSS 7.7 (high), 2026-09-23: A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted,…
CVE-2026-84502 - CVSS 9.9 (critical), 2026-09-23: A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project scm_url field is not validated against values that begin with a…
CVE-2026-84474 - CVSS 9.9 (critical), 2026-09-23: A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret (host_config_key) is exposed to users…
CVE-2026-84486 - CVSS 8.2 (high), 2026-09-23: A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Four debug views that trigger the internal task, dependency, and workflow…
CVE-2026-71465 - CVSS 3.1 (low), 2026-09-23: RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob. A limit beginning…
CVE-2026-71464 - CVSS 3.1 (low), 2026-09-23: LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers. Schedule and…
CVE-2026-71463 - CVSS 2.7 (low), 2026-09-23: Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job['job'+'_env']) and {% if job.id > 100 %} conditional…
CVE-2026-71462 - CVSS 4.1 (medium), 2026-09-23: StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary absolute…
CVE-2026-71460 - CVSS 4.3 (medium), 2026-09-23: /api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, instance counts) returned to…
CVE-2026-71459 - CVSS 5 (medium), 2026-09-23: JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermission.check_get_permissions() falls through (returns True) for any authenticated…
CVE-2026-71458 - CVSS 5 (medium), 2026-09-23: URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving the…
CVE-2026-42784 - CVSS 7.4 (high), 2026-09-16: A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a…
CVE-2026-84470 - CVSS 6.4 (medium), 2026-09-01: A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Job Launch API (POST /api/v2/bulk/job_launch/) authorizes the…
CVE-2026-71366 - CVSS 7.7 (high), 2026-08-24: A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Mattermost, Rocket.Chat, and Grafana…
CVE-2026-71364 - CVSS 7.2 (high), 2026-08-24: A path traversal vulnerability was found in AWX's project archive extraction. The project_archive action plugin extracts zip and tar archive members by…
CVE-2026-71365 - CVSS 7.7 (high), 2026-08-18: A server-side request forgery (SSRF) vulnerability was found in AWX's webhook status callback mechanism. When processing GitHub pull request webhooks, AWX…
CVE-2026-12564 - CVSS 9.6 (critical), 2026-08-18: A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashivault.py reads the…
CVE-2026-18141 - CVSS 8.2 (high), 2026-07-31: A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible (EDA). An unauthenticated remote attacker can bypass mutual…
CVE-2026-12383 - CVSS 7.5 (high), 2026-07-27: A flaw was found in the Event-Driven Ansible (EDA) server. The ExternalEventStreamViewSet uses permissive access controls (permission_classes=[AllowAny],…
CVE-2026-12701 - CVSS 9 (critical), 2026-07-20: A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to…
CVE-2026-12382 - CVSS 8.2 (high), 2026-07-15: A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client…
CVE-2026-52902 - CVSS 4.7 (medium), 2026-06-09: A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to…
CVE-2026-11332 - CVSS 7.8 (high), 2026-06-05: A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to…
CVE-2026-6266 - CVSS 8.3 (high), 2026-05-04: A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (IDP) identity to…
CVE-2025-9909 - CVSS 6.7 (medium), 2026-02-27: A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of…
CVE-2025-9908 - CVSS 6.7 (medium), 2026-02-27: A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain…
CVE-2025-9907 - CVSS 6.7 (medium), 2026-02-27: A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerability allows exposure of sensitive…
CVE-2025-5988 - CVSS 5.3 (medium), 2025-08-04: A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin checking is not done on requests from the gateway to external…
CVE-2025-7738 - CVSS 4.4 (medium), 2025-07-31: A flaw was found in Ansible Automation Platform (AAP) where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear…
CVE-2025-49521 - CVSS 8.8 (high), 2025-06-30: A flaw was found in the EDA component of the Ansible Automation Platform, where user-supplied Git branch or refspec values are evaluated as Jinja2 templates.…
CVE-2025-49520 - CVSS 8.8 (high), 2025-06-30: A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to the git ls-remote command. This…
CVE-2025-2877 - CVSS 6.5 (medium), 2025-03-28: A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are…
CVE-2024-11483 - CVSS 5 (medium), 2024-11-25: A vulnerability was found in the Ansible Automation Platform (AAP). This flaw allows attackers to escalate privileges by improperly leveraging read-scoped…
CVE-2024-11079 - CVSS 5.5 (medium), 2024-11-12: A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute…
CVE-2024-9902 - CVSS 6.3 (medium), 2024-11-06: A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the contents of any file on any…
CVE-2024-10033 - CVSS 6.1 (medium), 2024-10-16: A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. This flaw allows a malicious user to…
CVE-2024-8775 - CVSS 5.5 (medium), 2024-09-14: A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This…
CVE-2024-6840 - CVSS 6.6 (medium), 2024-09-12: An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with…
CVE-2024-1657 - CVSS 8.1 (high), 2024-04-25: A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation from the Ansible rulebook EDA server. An…
CVE-2024-1394 - CVSS 7.5 (high), 2024-03-21: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using…
CVE-2024-0690 - CVSS 5.5 (medium), 2024-02-06: An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still…
CVE-2023-5115 - CVSS 6.3 (medium), 2023-12-18: An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the…
CVE-2023-5764 - CVSS 7.8 (high), 2023-12-12: A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data.…
CVE-2023-5189 - CVSS 6.5 (medium), 2023-11-14: A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer…
CVE-2023-4380 - CVSS 6.3 (medium), 2023-10-04: A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw…
CVE-2023-3971 - CVSS 7.3 (high), 2023-10-04: An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login…