Vulnerability · Published Oct 6, 2026 · Assigned by redhat

CVE-2026-106033Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter

Medium 5.4

In plain English

A medium-severity cross-site scripting in Red Hat Ansible Automation Platform 2 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)0.2%top 84.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's location.href without verifying its format or scheme. The platform includes built-in URL validation functions designed to block malicious URI schemes (such as javascript: and data:) as well as off-site or protocol-relative redirects, this specific route bypasses those controls. Consequently, an attacker can craft a malicious link that, when accessed by an authenticated user, causes arbitrary JavaScript to execute within the context of the user's session.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Hardened Images	see references

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

References

https://access.redhat.com/security/cve/CVE-2026-106033 vdb-entry, x_refsource_REDHAT
RHBZ#2546603 issue-tracking, x_refsource_REDHAT