Red Hat Red Hat Ansible Automation Platform 2.5

• CVE-2026-11807 Critical 9.6 Eda-server: websocket missing authorization allows credential theft via activation_id spoofing 0.5%
• CVE-2026-11332 High 7.8 Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 0.2%
• CVE-2025-57847 Medium 6.4 Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions 0.2%
• CVE-2025-14025 High 8.5 Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions 0.4%