# Red Hat Ansible Automation Platform 2. Every CVE that names Red Hat Ansible Automation Platform 2 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Ansible-core: user module generate_ssh_key follows a symlinked \~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)](https://agentprime.io/advisories/CVE-2026-123037.md) `CVE-2026-123037` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 2 more · CVSS 6.7 Medium · Not analysed yet · Published 6 Nov 2026 · Tags: Path traversal - [Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers](https://agentprime.io/advisories/CVE-2026-114236.md) `CVE-2026-114236` · CVE record: Red Hat Confidential Compute Attestation and 4 more · CVSS 3.3 Low · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl)](https://agentprime.io/advisories/CVE-2026-109131.md) `CVE-2026-109131` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS) - [Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection](https://agentprime.io/advisories/CVE-2026-92982.md) `CVE-2026-92982` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 and 4 more · CVSS 8.5 High · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection - [Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution](https://agentprime.io/advisories/CVE-2026-89091.md) `CVE-2026-89091` · CVE record: Red Hat Migration Toolkit for Applications 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal - [Pulp-ansible: bearer tokens are reused across remotes in a worker](https://agentprime.io/advisories/CVE-2026-103869.md) `CVE-2026-103869` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-488 - [Pulp-container: registry credentials are reused across remotes in a worker](https://agentprime.io/advisories/CVE-2026-103868.md) `CVE-2026-103868` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-488 - [Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter](https://agentprime.io/advisories/CVE-2026-106033.md) `CVE-2026-106033` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site scripting (XSS) - [Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory](https://agentprime.io/advisories/CVE-2026-103754.md) `CVE-2026-103754` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 5.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal - [Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft](https://agentprime.io/advisories/CVE-2026-90959.md) `CVE-2026-90959` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Sept 2026 · Tags: Path traversal - [Aap-gateway: aap-gateway: authorization bypass via workload identity token forgery](https://agentprime.io/advisories/CVE-2026-94416.md) `CVE-2026-94416` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 2 more · CVSS 6.8 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil)](https://agentprime.io/advisories/CVE-2026-84721.md) `CVE-2026-84721` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.7 and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Server-side request forgery (SSRF) - [Automation-controller: automation-controller: notification.recipients/subject/error lack prevent_search, allowing zero-privilege cross-tenant recovery of notification recipient secrets via filter ora…](https://agentprime.io/advisories/CVE-2026-84713.md) `CVE-2026-84713` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.7 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Broken access control - [Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator\_\* settings leads to remote code execution in the control-plane rsyslo…](https://agentprime.io/advisories/CVE-2026-85475.md) `CVE-2026-85475` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.7 and 1 more · CVSS 7.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: Code injection - [Automation-controller: automation-controller-container: automation-controller: verbose internal exception disclosure via hostlist bare-exception handler](https://agentprime.io/advisories/CVE-2026-71461.md) `CVE-2026-71461` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.7 and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Information disclosure - [Automation-controller: automation-controller-container: aap controller: copyapiview.post() missing read authorization check enables job template secret recovery](https://agentprime.io/advisories/CVE-2026-76648.md) `CVE-2026-76648` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.7 and 1 more · CVSS 8.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: Broken access control - [Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion](https://agentprime.io/advisories/CVE-2026-42784.md) `CVE-2026-42784` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 4 more · CVSS 7.4 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS - [Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array](https://agentprime.io/advisories/CVE-2026-92091.md) `CVE-2026-92091` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Denial of service - [Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory](https://agentprime.io/advisories/CVE-2026-79699.md) `CVE-2026-79699` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Path traversal - [Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers](https://agentprime.io/advisories/CVE-2026-79705.md) `CVE-2026-79705` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 4.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Path traversal - [Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification](https://agentprime.io/advisories/CVE-2026-84185.md) `CVE-2026-84185` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS - [Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content](https://agentprime.io/advisories/CVE-2026-84232.md) `CVE-2026-84232` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 3 more · CVSS 5.4 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Cross-site scripting (XSS) - [Jwcrypto: jwcrypto: denial of service via malformed jwe tokens](https://agentprime.io/advisories/CVE-2026-80179.md) `CVE-2026-80179` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Denial of service - [Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_url with no private-address restriction](https://agentprime.io/advisories/CVE-2026-79717.md) `CVE-2026-79717` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 6.4 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Server-side request forgery (SSRF) - [Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header](https://agentprime.io/advisories/CVE-2026-18141.md) `CVE-2026-18141` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 3 more · CVSS 8.2 High · Not analysed yet · Published 31 Jul 2026 · Tags: Weak cryptography or TLS - [Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings](https://agentprime.io/advisories/CVE-2026-44191.md) `CVE-2026-44191` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 7.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection - [Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key](https://agentprime.io/advisories/CVE-2026-44187.md) `CVE-2026-44187` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 3.3 Low · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-256 - [Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal](https://agentprime.io/advisories/CVE-2026-44192.md) `CVE-2026-44192` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 6.6 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Path traversal - [Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execution via command injection in activation script setting](https://agentprime.io/advisories/CVE-2026-44190.md) `CVE-2026-44190` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 7.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection - [Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrary code execution via malicious playbook filename](https://agentprime.io/advisories/CVE-2026-44189.md) `CVE-2026-44189` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 7.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection - [Awx: websocket eventconsumer missing authorization for inventory_update_events, project_update_events, and system_job_events allows cross-organization stdout disclosure](https://agentprime.io/advisories/CVE-2026-16544.md) `CVE-2026-16544` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 6.5 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Broken access control - [Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)](https://agentprime.io/advisories/CVE-2026-16493.md) `CVE-2026-16493` · CVE record: Red Hat Red Hat Satellite 6.17 for RHEL 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection - [Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport](https://agentprime.io/advisories/CVE-2026-12701.md) `CVE-2026-12701` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Path traversal - [Eda-server: websocket missing authorization allows credential theft via activation_id spoofing](https://agentprime.io/advisories/CVE-2026-11807.md) `CVE-2026-11807` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 and 4 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jun 2026 · Tags: Broken access control - [Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credential](https://agentprime.io/advisories/CVE-2026-12726.md) `CVE-2026-12726` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 6.3 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF) - [Ansible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expiration](https://agentprime.io/advisories/CVE-2026-44188.md) `CVE-2026-44188` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Authentication bypass - [Aap-mcp-server: aap mcp server: log injection allows social engineering attacks via unsanitized input](https://agentprime.io/advisories/CVE-2026-6494.md) `CVE-2026-6494` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Other injection - [Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions](https://agentprime.io/advisories/CVE-2025-57847.md) `CVE-2025-57847` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.16 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Broken access control - [Ansible-lightspeed: broken object level authorization leading to cross-user ai conversation context injection in ansible lightspeed api](https://agentprime.io/advisories/CVE-2026-0598.md) `CVE-2026-0598` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 and 1 more · CVSS 4.2 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-283 - [Nx: nx/devkit: malicious versions of nx and plugins published to npm](https://agentprime.io/advisories/CVE-2025-10894.md) `CVE-2025-10894` · CVE record: Red Hat Multicluster Global Hub and 3 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-506 - [Aap: sensitive cookie(s) set without security flags](https://agentprime.io/advisories/CVE-2025-53861.md) `CVE-2025-53861` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 3.1 Low · Not analysed yet · Published 11 Jul 2025 · Tags: Weak cryptography or TLS - [Aap: aap-gateway: automation-hub: sensitive information disclosure](https://agentprime.io/advisories/CVE-2025-53862.md) `CVE-2025-53862` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 3.5 Low · Not analysed yet · Published 11 Jul 2025 · Tags: Information disclosure - [Event-driven automation in ansible automation platform (aap): ansible event-driven automation (eda) lacks encryption](https://agentprime.io/advisories/CVE-2024-9620.md) `CVE-2024-9620` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Weak cryptography or TLS - [Controller: cross site scripting in automation controller ui](https://agentprime.io/advisories/CVE-2022-3205.md) `CVE-2022-3205` · CVE record: Red Hat Red Hat Ansible Automation Platform 1.2 and 1 more · CVSS 4.6 Medium · Not analysed yet · Published 13 Sept 2022 · Tags: Cross-site scripting (XSS) ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .