agentprime: red-hat-ansible-automation-platform-2-4-for-rhel-8Every new CVE for red-hat-ansible-automation-platform-2-4-for-rhel-8.https://agentprime.io/CVE-2026-84719: Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane)https://agentprime.io/advisories/CVE-2026-84719/https://agentprime.io/advisories/CVE-2026-84719/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 19:40:07 GMTCVEcriticalCVE-2026-75884: Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groupshttps://agentprime.io/advisories/CVE-2026-75884/https://agentprime.io/advisories/CVE-2026-75884/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 19:39:52 GMTCVEcriticalCVE-2026-84502: Automation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote --upload-pack` yields rce on the controller-task control-plane podhttps://agentprime.io/advisories/CVE-2026-84502/https://agentprime.io/advisories/CVE-2026-84502/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 18:47:26 GMTCVEcriticalCVE-2026-84474: Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioni…https://agentprime.io/advisories/CVE-2026-84474/https://agentprime.io/advisories/CVE-2026-84474/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 18:41:18 GMTCVEcriticalCVE-2026-12564: Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrfhttps://agentprime.io/advisories/CVE-2026-12564/https://agentprime.io/advisories/CVE-2026-12564/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 15:50:54 GMTCVEcriticalCVE-2025-2877: Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in edahttps://agentprime.io/advisories/CVE-2025-2877/https://agentprime.io/advisories/CVE-2025-2877/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Mar 2025 14:05:18 GMTCVECVE-2024-6840: Automation-controller: gain access to the k8s api server via job execution with container grouphttps://agentprime.io/advisories/CVE-2024-6840/https://agentprime.io/advisories/CVE-2024-6840/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Sep 2024 16:35:08 GMTCVECVE-2024-1657: Platform: insecure websocket used when interacting with eda serverhttps://agentprime.io/advisories/CVE-2024-1657/https://agentprime.io/advisories/CVE-2024-1657/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Apr 2024 16:28:38 GMTCVECVE-2023-3971: Controller: html injection in custom login infohttps://agentprime.io/advisories/CVE-2023-3971/https://agentprime.io/advisories/CVE-2023-3971/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Oct 2023 14:26:01 GMTCVECVE-2023-4380: Platform: token exposed at importing projecthttps://agentprime.io/advisories/CVE-2023-4380/https://agentprime.io/advisories/CVE-2023-4380/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Oct 2023 14:24:35 GMTCVE