Red Hat Red Hat Ansible Automation Platform 2

• CVE-2026-114236 Low 3.3 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers 0.1%
• CVE-2026-109131 Medium 5.4 Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl) 0.2%
• CVE-2026-92982 High 8.5 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection 0.5%
• CVE-2026-89091 High 8.8 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 0.5%
• CVE-2026-103869 Medium 6.5 Pulp-ansible: bearer tokens are reused across remotes in a worker 0.2%
• CVE-2026-103868 Medium 6.5 Pulp-container: registry credentials are reused across remotes in a worker 0.2%
• CVE-2026-106033 Medium 5.4 Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter 0.2%
• CVE-2026-103754 Medium 5.9 Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory 0.3%
• CVE-2026-90959 High 8.1 Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft 0.4%
• CVE-2026-94416 Medium 6.8 Aap-gateway: aap-gateway: authorization bypass via workload identity token forgery 0.5%
• CVE-2026-84721 Medium 6.4 Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil) 0.3%
• CVE-2026-84713 Medium 6.5 Automation-controller: automation-controller: notification.recipients/subject/error lack prevent_search, allowing zero-privilege cross-tenant recovery of notification recipient secrets via filter oracle 0.4%
• CVE-2026-85475 High 7.2 Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component 0.8%
• CVE-2026-71461 Medium 4.3 Automation-controller: automation-controller-container: automation-controller: verbose internal exception disclosure via hostlist bare-exception handler 0.4%
• CVE-2026-76648 High 8.5 Automation-controller: automation-controller-container: aap controller: copyapiview.post() missing read authorization check enables job template secret recovery 0.4%
• CVE-2026-42784 High 7.4 Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion 0.3%
• CVE-2026-92091 Medium 5.9 Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array 0.6%
• CVE-2026-79699 Medium 4.4 Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory 0.2%
• CVE-2026-79705 Medium 4.5 Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers 0.4%
• CVE-2026-84185 Medium 5.9 Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification 0.1%
• CVE-2026-84232 Medium 5.4 Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content 0.2%
• CVE-2026-80179 Medium 5.9 Jwcrypto: jwcrypto: denial of service via malformed jwe tokens 0.3%
• CVE-2026-79717 Medium 6.4 Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_url with no private-address restriction 0.4%
• CVE-2026-19730 Medium 4.2 Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives 0.1%
• CVE-2026-18141 High 8.2 Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header 0.4%
• CVE-2026-44191 High 7.8 Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings 0.8%
• CVE-2026-44187 Low 3.3 Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key 0.1%
• CVE-2026-44192 Medium 6.6 Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal 0.2%
• CVE-2026-44190 High 7.8 Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execution via command injection in activation script setting 0.8%
• CVE-2026-44189 High 7.8 Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrary code execution via malicious playbook filename 1.0%
• CVE-2026-16544 Medium 6.5 Awx: websocket eventconsumer missing authorization for inventory_update_events, project_update_events, and system_job_events allows cross-organization stdout disclosure 0.4%
• CVE-2026-16493 High 7.8 Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) 0.3%
• CVE-2026-12701 Critical 9.0 Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport 1.2%
• CVE-2026-11807 Critical 9.6 Eda-server: websocket missing authorization allows credential theft via activation_id spoofing 0.5%
• CVE-2026-12726 Medium 6.3 Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credential 0.3%
• CVE-2026-12398 High 7.5 Galaxy_ng: shell injection in legacy role import via unsanitized git ref names 0.9%
• CVE-2026-44188 Medium 5.3 Ansible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expiration 0.3%
• CVE-2026-52902 Medium 4.7 Awxkit: path traversal via yaml !include directive 0.1%
• CVE-2026-11332 High 7.8 Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 0.2%
• CVE-2026-6494 Medium 5.3 Aap-mcp-server: aap mcp server: log injection allows social engineering attacks via unsanitized input 0.3%
• CVE-2025-57847 Medium 6.4 Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions 0.2%
• CVE-2026-0598 Medium 4.2 Ansible-lightspeed: broken object level authorization leading to cross-user ai conversation context injection in ansible lightspeed api 0.2%
• CVE-2025-10894 Critical 9.6 Nx: nx/devkit: malicious versions of nx and plugins published to npm 0.6%
• CVE-2025-53861 Low 3.1 Aap: sensitive cookie(s) set without security flags 0.1%
• CVE-2025-53862 Low 3.5 Aap: aap-gateway: automation-hub: sensitive information disclosure 0.2%
• CVE-2024-11831 Medium 5.4 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 1.1%
• CVE-2024-9979 Medium 5.3 Pyo3: risk of use-after-free in `borrowed` reads from python weak references 0.2%
• CVE-2024-9620 Medium 5.3 Event-driven automation in ansible automation platform (aap): ansible event-driven automation (eda) lacks encryption 0.2%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%
• CVE-2024-7143 Medium 6.7 Pulpcore: rbac permissions incorrectly assigned in tasks that create objects 0.6%