Vulnerability-Lookup

RHSA-2026:71179

Vulnerability from csaf_redhat - Published: 2026-09-23 22:20 - Updated: 2026-09-24 09:56

Summary

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

Severity

Critical

Notes

Topic: An update is now available for Red Hat Ansible Automation Platform 2.6

Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. For details about this release, refer to the release notes listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-57847

A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This vulnerability allows an attacker to add a new user with any arbitrary UID, including UID 0, gaining full root privileges within the container.

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-276 - Incorrect Default Permissions

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Vendor Fix fix

Known not affected 106 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64		—

Threats

Impact Moderate

CVE-2025-66418

A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Vendor Fix fix Workaround

Known not affected 110 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64	—	Workaround

Threats

Impact Important

CVE-2026-12564

A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashivault.py reads the controller pod's Kubernetes service account token and sends it to an attacker-controlled URL when a HashiCorp Vault Secret Lookup credential with kubernetes_role authentication is tested. An authenticated attacker with credential-creation privileges can exfiltrate the service account token, gaining Kubernetes API access to the control plane namespaces with full pod CRUD and secret read permissions, including database credentials and the Django SECRET_KEY.

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Vendor Fix fix Workaround

Known not affected 114 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64	—	Workaround

Threats

Impact Critical

CVE-2026-14257

A flaw was found in brace-expansion. A remote attacker can exploit this vulnerability by providing specially crafted input to the expand() function, which can lead to excessive memory consumption. This can cause a denial of service (DoS) by crashing the application due to an out-of-memory error.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Vendor Fix fix Workaround

Known not affected 114 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64	—	Workaround

Threats

Impact Important

CVE-2026-15307

A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally, it can be used to make outbound network requests, resulting in server-side request forgery.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-434 - Unrestricted Upload of File with Dangerous Type

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Vendor Fix fix Workaround

Known not affected 110 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64	—	Workaround

Threats

Impact Important

CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Vendor Fix fix

Known not affected 114 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64		—

Threats

Impact Important

CVE-2026-42215

A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments (kwargs) to functions such as Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(). This bypasses existing security checks designed to block dangerous Git options, enabling the execution of unauthorized commands.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Vendor Fix fix Workaround

Known not affected 110 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64	—	Workaround

Threats

Impact Important

CVE-2026-42284

A flaw was found in GitPython, a Python library for interacting with Git repositories. A remote attacker could exploit an input validation vulnerability in the `_clone()` function. By crafting a malicious string in the `multi_options` parameter, an attacker could bypass validation. This allows for the injection of arbitrary Git configurations, such as `core.hooksPath`, leading to the execution of attacker-controlled hooks and ultimately, arbitrary code execution during a clone operation.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-42215

Known not affected 110 products, the same list as for CVE-2026-42215

Threats

Impact Important

CVE-2026-42504

A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 114 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-44244

A flaw was found in GitPython, a Python library used to interact with Git repositories. The `GitConfigParser.set_value()` function does not properly validate input for newlines. This vulnerability allows an attacker to inject malicious configuration settings, specifically the `core.hooksPath`, into a Git repository. Consequently, any Git operation that triggers hooks, such as committing or merging, could lead to arbitrary code execution from an attacker-controlled path.

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-1286 - Improper Validation of Syntactic Correctness of Input

Affected products

Fixed 8 products, the same list as for CVE-2026-42215

Known not affected 110 products, the same list as for CVE-2026-42215

Threats

Impact Important

CVE-2026-49825

A flaw was found in lxml, a library for processing XML and HTML in Python. The `lxml.html.defs.link_attrs` were missing `xlink:href`, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics (SVG) or Mathematical Markup Language (MathML), potentially leading to information disclosure or arbitrary code execution in the context of the user's browser.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

CWE-166 - Improper Handling of Missing Special Element

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Vendor Fix fix

Known not affected 106 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64		—

Threats

Impact Important

CVE-2026-53488

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.

8.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64	—	Vendor Fix fix Workaround

Known not affected 114 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64	—	Workaround

Threats

Impact Important

CVE-2026-53492

A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 4 products, the same list as for CVE-2026-53488

Known not affected 114 products, the same list as for CVE-2026-53488

Threats

Impact Important

CVE-2026-54284

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit a vulnerability in the TokenList construction and string conversion processes, specifically when handling nested token subtrees. This flaw leads to quadratic CPU consumption, which can result in a Denial of Service (DoS) by exhausting system resources before internal limits are reached.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 20 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Vendor Fix fix

Known not affected 98 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64		—

Threats

Impact Important

CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 114 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 114 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 114 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 114 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 114 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-59877

A flaw was found in protobufjs, a JavaScript (JS) library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library's parsing functions to loop indefinitely. This leads to a Denial of Service (DoS), making the affected system unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products, the same list as for CVE-2026-14257

Known not affected 114 products, the same list as for CVE-2026-14257

Threats

Impact Important

CVE-2026-59893

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input. This flaw causes inefficient processing of certain SQL patterns, leading to excessive CPU consumption and potentially a Denial of Service (DoS) condition, making the application unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 24 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Vendor Fix fix

Known not affected 94 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64		—
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64		—

Threats

Impact Important

CVE-2026-67322

A flaw was found in GitPython. A remote attacker can exploit a vulnerability in the Repo.clone_from() method by providing a specially crafted Git repository URL. This URL can contain references to environment variables, which are then expanded and included in the URL. This allows the attacker to exfiltrate sensitive environment variables, such as access keys or tokens, to an attacker-controlled server during the cloning process, leading to information disclosure.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-214 - Invocation of Process Using Visible Sensitive Information

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-67323

A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive() and git.ls_remote(), potentially leading to arbitrary code execution. Additionally, functions such as Repo.iter_commits() and Repo.blame() do not validate revision arguments, which could allow an attacker to truncate arbitrary files. Exploitation requires an application to pass attacker-controlled input directly to these vulnerable methods.

8.4 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-67325

A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous options. This allows for the execution of arbitrary commands, leading to potential arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-14257

Known not affected 114 products, the same list as for CVE-2026-14257

Threats

Impact Important

CVE-2026-69153

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the 'from' parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application's source code.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2026-14257

Known not affected 114 products, the same list as for CVE-2026-14257

Threats

Impact Moderate

CVE-2026-69244

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit this to trigger a Denial of Service (DoS) in the client application, making it unavailable.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-71458

URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving the pk=0 miss path with a different 404 detail string. Differential "Not found." vs "No <Model> matches..." reveals whether a named resource (org, credential, inventory, host) exists anywhere on the platform. Enables cross-tenant internal hostname enumeration.

5.0 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-204 - Observable Response Discrepancy

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-71459

JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermission.check_get_permissions() falls through (returns True) for any authenticated user. The view uses raw get_object_or_404(Job, pk) without DRF object-level permission check. Zero-privilege user reads event tree structure, event_processing_finished status, and enumerates Job IDs platform-wide via 200/404 oracle. Sibling endpoint /jobs/{id}/job_events/ correctly returns 403.

5.0 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-862 - Missing Authorization

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-71460

/api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, instance counts) returned to any authenticated user. The superuser/auditor gate only covers project_base_dir/project_local_paths/custom_virtualenvs, not license_info. Enables social engineering against Red Hat support and estate sizing reconnaissance.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-862 - Missing Authorization

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-71462

StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary absolute paths on the controller-web pod. Tenant superuser can confirm /etc/tower/SECRET_KEY, k8s service-account token, receptor sockets, ConfigMap mount points. Mainly impactful on managed AAP (ansiblecloud.com) where tenant admin != host admin.

4.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

CWE-204 - Observable Response Discrepancy

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-71463

Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job['job'+'_env']) and {% if job.id > 100 %} conditional gating bypass both the AST check and the test-render (stub has small job.id). At runtime, the gated branch executes and exceptions write full tracebacks into notification body, which is POSTed to attacker-controlled webhook URL. Leaks install paths, Python version, source line numbers.

2.7 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CWE-209 - Generation of Error Message Containing Sensitive Information

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Low

CVE-2026-71464

LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers. Schedule and WFJT Node accept --upload-pack=/bin/id as scm_branch. Currently blocked at runtime by jobs.py:1502 ValueError check (defense-in-depth), but the API validation gap means sole reliance on a task-layer guard. Refactoring that guard away would promote this to RCE.

3.1 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Low

CVE-2026-71465

RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags (--version, --help) since injected element displaces required pattern positional. Would escalate if ansible-core ever defaults pattern.

3.1 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Low

CVE-2026-71491

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input that contains numerous comment-only statements. This could cause the `group_comments` function to repeatedly rescan these statements, leading to excessive CPU consumption and a Denial of Service (DoS) for the application using the parser.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 20 products, the same list as for CVE-2026-54284

Known not affected 98 products, the same list as for CVE-2026-54284

Threats

Impact Important

CVE-2026-73086

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-1241 - Use of Predictable Algorithm in Random Number Generator

Affected products

Fixed 4 products, the same list as for CVE-2026-14257

Known not affected 114 products, the same list as for CVE-2026-14257

Threats

Impact Important

CVE-2026-73620

A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the `IndexFile.checkout()` and `TagReference.create()` functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to overwrite arbitrary files with repository content or read sensitive files. This could result in significant data integrity and confidentiality impacts.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-42215

Known not affected 110 products, the same list as for CVE-2026-42215

Threats

Impact Important

CVE-2026-73622

A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted to attacker-controlled hosts, leading to information disclosure.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-914 - Improper Control of Dynamically-Identified Variables

Affected products

Fixed 8 products, the same list as for CVE-2026-42215

Known not affected 110 products, the same list as for CVE-2026-42215

Threats

Impact Important

CVE-2026-73623

A flaw was found in GitPython. An incomplete denylist in the `unsafe_git_clone_options` function fails to restrict the `--template` option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-42215

Known not affected 110 products, the same list as for CVE-2026-42215

Threats

Impact Important

CVE-2026-73624

A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the `Diffable.diff` method, an attacker can supply a malicious output argument to write patch content to attacker-controlled file paths, leading to potential system compromise.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-42215

Known not affected 110 products, the same list as for CVE-2026-42215

Threats

Impact Important

CVE-2026-73625

A flaw was found in GitPython. Attackers can bypass the `check_unsafe_options` guard by smuggling git options within single-character keyword argument (kwarg) values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as `clone_from` or `fetch`, leading to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-42215

Known not affected 110 products, the same list as for CVE-2026-42215

Threats

Impact Important

CVE-2026-75884

A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can exploit this to escalate privileges to OpenShift namespace-level access and exfiltrate namespace secrets.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-184 - Incomplete List of Disallowed Inputs

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-75899

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-140 - Improper Neutralization of Delimiters

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x	—	Vendor Fix fix Workaround

Known not affected 114 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64	—	Workaround

Threats

Impact Important

CVE-2026-75931

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 4 products, the same list as for CVE-2026-75899

Known not affected 114 products, the same list as for CVE-2026-75899

Threats

Impact Important

CVE-2026-75975

A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 4 products, the same list as for CVE-2026-75899

Known not affected 114 products, the same list as for CVE-2026-75899

Threats

Impact Important

CVE-2026-76172

A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-76 - Improper Neutralization of Equivalent Special Elements

Affected products

Fixed 4 products, the same list as for CVE-2026-75899

Known not affected 114 products, the same list as for CVE-2026-75899

Threats

Impact Important

CVE-2026-76218

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the `Repo.init` function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on the initialized repository, these hooks execute arbitrary code, leading to a complete compromise of the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-76219

A flaw was found in GitPython. This vulnerability allows an attacker to overwrite arbitrary files on the system. By injecting specific options into the `git read-tree` command through methods like `IndexFile.from_tree`, `IndexFile.reset`, and `IndexFile.merge_tree`, without proper option validation or argument separation, an attacker can cause the application to write a git-index blob to any attacker-controlled writable path, leading to data destruction.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-76220

A flaw was found in GitPython. A remote attacker can bypass the `check_unsafe_options` guard by combining a single-character keyword argument with `split_single_char_options=False`. This allows the attacker to supply a crafted dictionary of keyword arguments to guarded methods, such as `clone_from`, leading to arbitrary operating system command execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-76221

A flaw was found in GitPython. This vulnerability allows attackers to inject malicious configuration options by manipulating option names within the option-name validator. By injecting special characters, an attacker can forge arbitrary git-config directives, potentially leading to arbitrary code execution on the system when a git operation is performed.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-76222

A flaw was found in GitPython where it fails to properly validate submodule names within .gitmodules files. A remote attacker could craft a malicious Git repository containing specially formed submodule names with directory traversal sequences. When GitPython processes these malicious submodule names during repository initialization, it could lead to the creation of attacker-controlled Git repositories at arbitrary locations on the filesystem, potentially impacting system integrity.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-78676

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated GitPython config write, enabling arbitrary code execution via hook invocation.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-78679

A flaw was found in GitPython. A remote attacker with low privileges can exploit a vulnerability in the `TagReference.create()` function, where a positional reference parameter bypasses a security guard. This allows the attacker to supply a specially crafted reference value, such as `--file=<path>`, to read arbitrary files on the system. The contents of these files are then returned within the annotated tag message, leading to information disclosure.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 8 products, the same list as for CVE-2026-42215

Known not affected 110 products, the same list as for CVE-2026-42215

Threats

Impact Moderate

CVE-2026-82417

A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1287 - Improper Validation of Specified Type of Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Vendor Fix fix Workaround

Known not affected 114 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64	—	Workaround

Threats

Impact Important

CVE-2026-84292

A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-140 - Improper Neutralization of Delimiters

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:076162dfe8d5c27ce272a74d7220fc3463d3b654e62d0db025e349f1cb4079ba_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:15c02da6ccb3b68350bcc7f482080d0111421e0b5386428a4367a3a6bd01fea2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:acbb749374e79a0b982368f2d5b4942d0c1649cf02f91d4cd342a4281f594538_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:d369b8245d51b55f434796e1b5e86fb99cacce3916c97f89ec82e5c84d24ff68_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:8a5bb8b5a3751aec8fc24ee67ea6f920559bfc3aeac3338c675f45c923e42f3c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b0c487548f6167fe22fae5d5f4751bfa7a8695a8155881d6e2c6cd3d898c17c3_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:b8e6facddb3c7e364234f95224e4145f43f46b8297be8be2b93b4430d8343272_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:be43c009c9441a048fd73684d754cf3777581150213a4b33176c936136d90722_s390x	—	Vendor Fix fix Workaround

Known not affected 110 products

Product	Version	Remediation
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1302191705838f29da44d8b812bf03b5d7806c6e31801e99e73f1254086357ee_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:143d71b4dabcee7cecf7abbd9c2bdab26eb5267c052f58cb8976a8d67596e528_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b8900562660beab21e4b54533b7375711b21de6b96cd98380e487d5856ed9581_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e8c9d372f5d1a704fa3fe2509d5892ef7498d639613b5bc18f8576749abff6a6_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:1b1009dd9d927bfb8e9f9b2eb597a1d2a3d5041686a30b59d7a970aac489676f_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:3194073a9f306d03829db98cfdafefa5c27f6c0890329082deb0b5f9b319925b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:cdd7130fb02dc86ba8e3c72b3ab600e597e62389f8c08ee05e41a7a80f019ab2_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fee9bbd62baced2222ade18bbae137ff8090077532119ea2f04e5efa52833838_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:b1dd010b857542b726300c89bbc462f1e3e5bb97e3e2d86f28697d49498aeb92_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:d783b3fa3daea76915743db173232ae806c27df829c235758f31fead509cb185_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ebf06d5e07222b31d3baa9547b7c67d85e450696ae153e37626de960172ee2a4_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:eed996dbd7eca7715adb3ad61e61ff312cde487fe283b926bda518c12d444cb1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:46266caee7c1bb20a85913132c482d4669b494f6b1f2f613afa13a66a6ea9e59_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:8557c6b4277961e12ba1d66932883084832a09081e5f3f9b7e8d0cddaa315a7c_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d706ebf55a040276420efd72944a6a5b572041b15d346542674f4b7469b49781_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:e659700870bb51c0cad9d77bc698e20dc1b29704ae344a6a6c4f297fb07aa8af_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4cf288cd1d881eb5cecff0652678d92d3415e5ce673493897236175eaad83cec_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:7f06ccc449fcd34a7371313cf12b920af06e706b1fa259c471b5062c21f557f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:97bc35281e7490e2a07716c8cb7738d478af88e6cdcb5afc8d32505637be9365_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:240bc243cf8ea5dc0248b8a3cff3a2f57be56a2b5f60dfe5eb089e9a1676f9ba_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7fed647525411bcfd9fe97e76e981a6de09be9e14bc0abb8898453726a9562f3_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:8299442c93457f21581aeac45279614b07052f1e8fad46cec7bed74d7d11689b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f11cf8cee7cf84c925f8eee070bf768bfc3fa7fbec88765403b9b270f9b97ce6_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:15e544936ada4deb4addd6d6527afa18945fc292e859a934050eef3378fc2468_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:76f471dbd0ef7629eb468cab75efbf1a9b2794994e50a1718289ac386666fb7a_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a98424c9fb19670afdeb0880f4fb5f8d931e836b84bba074b4a174ca7f2302c1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f74b77ee8b2448631113eed28b53d9dd50829cfc91df94da1da7d890664c89bc_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0ad74aa9b7435051686a5244d747e52bef0054a462ff0a2a72c218f14e4370f0_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:2d14195fc25c2fa98083117e910ebe1af1face0fd026468d299c2284b0223ea9_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:61ba17c11bb3d75206d334719bcb051d4be61feaeee158fbf9570b8150362390_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:e0528d09a1ba03cbce2b3e367f4711b18d3d3c2e679bd00d75ff7089eb4dbf2d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:62a6f285bb0b8b696350967b89e3ebb34098eada855936a9d130cd431d555848_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:7ff6a0313e02b441bc5e5fb5f4d21181683728a7a96a5cf1c3673982d9bd5f6b_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b28e2693be6677c37d7968c7adf1444cfa55fde9db8ea6d4faf24d16a6d2efc0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:c29b969e851bdfaf77ab8da5a49c0dc9c0ce4c14781d0dd857eabdfc8b331dca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:151056ff4dc2ba04e96f4a6337a3a1ccc152dfbf35ad3321fe217fe1fbb7b258_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:4fd5c2b67a19b502487ccbdf65a0bccaff52fba9f8eda588b8ce3ab5b5613b5a_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:6d214454547c045b467b2ca62378d4e9ea9fa42c374424c38c295e0dcf48c9c9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:b5829721bcfca5631fe9ca337af9ddff81357e80f25d55803ed74d0ca4cd25eb_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:49df7cad0141a4a9798ae2fc14344e917b06f358778b0e762d33c6da15a32b07_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:4e550fe9a899fe0b17e56d7e8c4658fc96e7ce12366430c5ddac11d62c601d78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:be4134ddd9eeab7580d101239e5b9e884234ff1adb9262c4816da791912d04e7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9@sha256:ffcfc4b45c51733ed26577807f750618655c3520df5f58fca600753b17fa2765_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:44fff393607ff7b55966f9f7b016c29b5f05caa8eb976144ffb1e4448dec3c24_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:78386d249a85d6341c1b9e1cc73b95869f4efba7d54b3935150fddfc83a97778_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:8b0274ab1ce3188d797c03c473b4414908c51cd50d1c65880b8d27af9bcb0a4d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:f9e15d4d7eb89014205caf4014308bf1ca499efe3a77d86d83e2cd41d7f11db7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:30f07105e0a23ef15f646eb347ef1b90be78923e59723f7539811dbd020b4537_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:5c6c1d0124d3a22a1505de9422d8658762319e3fe93c8a0fa7011631d1a80510_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:645ee07c0dcd9262efc6b72871c5b1611930064179b35066a1b550779f282361_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:9b95fc32ca086d8a12dec37d638a6f7b8c35db697f6fe0f71fc11bbd96c66701_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:4027f1bc445b1eb4c196e6053e49ebe59c4ab47c7cd7791461d3c61d351d62e7_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:59f56dbe0423a70f5ea6f0e39f1cdecd9e6490de07c9ae4364fcfb465bf0d250_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:5b5d9df8c30fadc482addb004f247c0ae586ee493871d1c08cedcfed430552ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:c2fac54922bd0f42db5c30f8d3818f33ef39bfb863bcdd48ccfff78440adfe68_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:b0395502aca785c8fedf9932ce528c8447c2f1b38e0ed52bd9a5d42defec00d7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:c0900891ceab2c28ebcdd3d5dfd5a02ee731696c0f497b55dc71d5d0baf59447_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:d1d18fab009a20f1bc9b6c89f20d5a38323cba76c75cf5a5d7967596afb96240_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:e5bb9c8f68487ce79d5e1d023f0dba93430eb7f49790d23a6788a0a62fcb569e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5874a2ea9cfed68b5aa2da83537442cbfa0bdcccd0ea4292001fd5851a4f8c16_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:5ef4918aba897fa7c44c05011f3262bd6147514d475f35498e9e4107f7821f3b_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:731457c0abeba75f27c45d870c16eb6d23c75fc13f43289d88af22308de4095e_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:f86188961751c818ab5a8b284ebb4c4deb2c6123fb4fab764bbacf99b4c68606_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:234d910de15d6192bce0766773dc1bbda5b9f7579f634574f2445f0dd44d2334_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:6d6766874910465605a90e897f470d32e50a7c40b628731552c4e5a98d66bf78_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:a89626cb36ee12ab3e31794662d3c791e0b3d3e7e9f4fb4624c0c4c096c0d445_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:c064c0ade6df38324c5f48f9efd66feef03170d9349b71c18ce739ca76a82f1d_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:4c061e822f4cadf04d9fdde2e0d7b50b14e5d009678279863c1a608ab318879b_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:6b3b131b1dd5f59866112e1cfb8979bf47c7ae7fbcde3ca6b10957fd4cf60c11_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:79dca03c5852203c678eee3a7480629e53fb1e7cad059530dcefc82b4e61dce5_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:cf6610afd7ac91c4e06f69b46a1ca5ed8f750d5a4d158312533f91f8d6116317_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:a1427ec67270d7e434e4008ca659cb80b8949b243fac7a08629475483341e80d_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d23889c9246462320c008c509368c25eb12c7cb0036c83f1ef13adb209252509_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:f411f0b3c10193d11db63f803a0b210b35a1a6a2bf5d9f1e5df8bf1f9274871e_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:b842833b911b9b9d61b3d3c94dc21e3f993e0050660d934f89f9ecb12c509537_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:ba632fb0f5194721c8e68dee6939c6d9b726e0e6ca659a83affa73432d2f2259_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:dc3a0e96ba7310ed00e233064bb5ebdfab765eb8ccc4b367bd4f521d6469f48c_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9-operator@sha256:f58b2761d4986d68e42cd690b04cd623ffff0b8b6d0ec693c81e7a4a4dc2d9ca_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0884ffc9b776a1c44584ac87226e715e06f4a7b43a9cccdf78317d1c97ff7f37_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:26d651801f74e8e9e0e90d80763402fb0c59ee6aed98cbab930b564d846998a0_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:83c8e7ce034ed6f90c4f01fc5de135f7d4ccdd852cda1be01ad07f7cfc75ff28_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:06fc0f38426ff9f61a9dd59fb48a4ba3ea83620e1f7740a39d573320ede72cca_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:824f94e088bd46219d8138177132453649666913de8110f9e0df30a1f0930265_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:84b9129f3fc051379027f9e3551eee57c954b7879fa4444de2d40718b83c1103_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:d49a50454d5bb6157ca8055808b7705a8447939f3e7fd998cd01d1879e68e723_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:161042999e7a54a4a61080776c785ca8bc4a239416abc5f82846c2683e11e4fc_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:47d1d7acfd23305bbca0bcc71addb1c7cdc0df02ec659a635bc198ef193fda91_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:4d5db28aa4fbe651746d9d74748d662b26d776dfb0636187e9f8526d219ae69c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/platform-resource-runner-rhel9@sha256:6c7a26abeeec5ef20330e9f788ef0aa11f894abdc4b57799566158b7305d6831_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:111a823a9e3968ea59e66ce4e2643a02b32487ec56e6a0ccf51a023bb8580229_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:2ffda95fd51c85721218c480449ccf83bc81ec492548897fb8b9ca2f5ad601e2_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:5283bd4ab2176a1751e2bc51667f1f5e6db95fe05482b35cf37b0bf2b95622de_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:bb23deef2b94f4a24684a4af5f8f2084c68778a71365ebc4dfc4c8356aba0d91_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:0f24eafd13e39b32a315534e00cc714c8efcbeb6c1a6fb1b6c97535cc398706c_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:1ef2970074dac0c1d32a12ad33963ec124a151cded13eea9c03439bdf684b6a8_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:5b5b1f12de2995866f9c97a092f2fa7394e9675603725bdba9290e67105b3878_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/ansible-devspaces-rhel9@sha256:8aab57e63be4c05cab44ba9703f66d47f1ed9dc20dba5326b6f3b42a4d6e49db_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:17b48fcebea0d714a068058ac42fb584d37bb423b157ce2d8f549abbeb069fdd_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:1b5d42048cae03db9cfb59bbed61798cf5a9cc25aa705dc43e02c56e5fa116e4_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:a3fc289dfaced3c413608f7ebe137a4f2ed0d0e9d1f8d8d30abccd17294564d9_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9-operator@sha256:be1e75a7786a5dd4fc008c1e12f11f18404af09a223d185d9f06cdae5883e057_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:19c5020070510058c81cf3a5ca634d1df278047b9220c42724d7df6592a1b669_ppc64le	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:62d627efcc5edb1f2bcc940dab8fccea3f6396de07f972dafa6b90fd2363da12_arm64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:9a63500f407cdf221e457a8f9fb993cfffaf0a1477ccb47b21650e66cc1c4ad7_s390x	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:e532d3e92f157aa0cbf6dc1ae962d0ae0a39aeb711b11bb5c5ca2a0d6306f6cb_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:259c9cbd715e69ee191b62d4953ba68ed3887b9350ede8245b342145d7bae7a0_amd64	—	Workaround
Unresolved product id: Red Hat Ansible Automation Platform 2.6:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:cbd88dbd81a2b8ee96d4963fb91da6ca2a0e05e69210c7f5b69f5e98c83777f0_amd64	—	Workaround

Threats

Impact Important

CVE-2026-84375

A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 8 products, the same list as for CVE-2026-84292

Known not affected 110 products, the same list as for CVE-2026-84292

Threats

Impact Moderate

CVE-2026-84394

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-75899

Known not affected 114 products, the same list as for CVE-2026-75899

Threats

Impact Important

CVE-2026-84470

A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Job Launch API (POST /api/v2/bulk/job_launch/) authorizes the requested instance_groups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same field. A principal that holds read (but not use) permission on an instance group -- for example the built-in read-only System Auditor role -- together with execute permission on a job template can launch bulk jobs onto instance groups they are not authorized to use, bypassing execution-placement isolation.

6.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

CWE-862 - Missing Authorization

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84474

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret (host_config_key) is exposed to users holding only the read-level view_jobtemplate permission -- both in the job template API representation and in the activity stream -- and the provisioning callback endpoint trusts a client-supplied X-Forwarded-For header to determine the calling host when the controller is deployed behind the AAP gateway with an empty proxy allow-list. By reading the secret and spoofing X-Forwarded-For to match any host in the job template's inventory, a minimally privileged or unauthenticated remote attacker can launch the job template against arbitrary managed hosts using the job template's credentials, resulting in privilege escalation and remote code execution on managed hosts.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84486

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Four debug views that trigger the internal task, dependency, and workflow schedulers are configured to allow any user (including unauthenticated clients) and are routed in production builds because their URL include is not gated on the debug setting. An unauthenticated remote attacker can repeatedly invoke these endpoints to acquire the cluster-wide scheduler advisory lock; because the legitimate scheduler acquires the same lock without waiting, the attacker causes real scheduler runs to be skipped, stalling job dispatch for all tenants, while also consuming controller web workers. The debug root view additionally discloses the list of debug endpoints to unauthenticated callers.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

CWE-489 - Active Debug Code

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84499

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification, the controller decrypts the stored password and includes its plaintext value in the minimum/maximum length validation error message returned in the HTTP response. A user with the delegated JobTemplate Admin role can tighten the survey length constraint and trigger revalidation of a schedule or node created by another, higher-privileged user, thereby recovering that user's stored password in plaintext.

7.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-209 - Generation of Error Message Containing Sensitive Information

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84502

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project scm_url field is not validated against values that begin with a dash and is stored and passed verbatim to the git SCM module. Because the module runs git ls-remote with the URL as a positional argument and without a "--" separator, a git project URL such as "--upload-pack=<command>:x" is interpreted by git as the --upload-pack option and executed via a shell. A user with permission to create or modify a project in a single organization can thereby execute arbitrary commands on the control-plane task pod, with output reflected through the project update stdout endpoint, leading to cross-tenant compromise and in-cluster lateral movement

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84638

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read (view) the instance group, rather than that they hold use permission on it, unlike every other instance group assignment in the product. An authenticated user with read-only visibility of an instance group -- for example a system auditor -- can attach a use-restricted instance group, including the control plane group or another tenant's container group, to a schedule or workflow node they control. Their playbook then executes on the control plane node or within another tenant's execution environment, leading to privilege escalation and, in the control plane case, full compromise of the platform.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-863 - Incorrect Authorization

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84643

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. A project has a signature validation credential foreign key used to validate signed project content. Unlike the project's SCM credential, the authorization logic does not verify that the requesting user has use permission on the referenced credential, and the API field has no validator or type restriction. An authenticated user holding only the organization project administrator role can therefore bind an arbitrary credential belonging to another organization, by its identifier, when creating or updating a project. The controller discloses that credential's name and type in the project's summary information and, during project synchronization, decrypts the bound credential and uses it in the attacker-controlled project's update, allowing a cross-tenant authorization boundary violation and information disclosure.

5.0 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84644

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Thycotic Secret Server external credential plugin passes a user-supplied server URL to its SDK without validating the scheme, host, or IP range, and the plugin backend is executed synchronously within the automation controller web process. Using the external credential test endpoint, a user who holds only the use role on such a credential can override the stored server URL with an arbitrary internal address, causing the control plane to issue requests to internal services. Although the response is a generic error, response timing reveals whether internal hosts and ports are reachable, enabling internal network reconnaissance and a blind request-forgery primitive from the control plane, and each request can hold a web worker, affecting availability.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84679

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The AWX_TASK_ENV setting accepts arbitrary environment variable keys with no restriction, and its values are applied directly to the running automation controller web and task processes rather than only to sandboxed execution environments. A user with the system administrator role can set variables such as REQUESTS_CA_BUNDLE, HTTPS_PROXY, SSLKEYLOGFILE, OPENSSL_CONF, or LD_PRELOAD that reconfigure the control-plane process TLS trust store, key-logging, OpenSSL engine, or dynamic linker. This enables silent interception of the outbound TLS the control plane uses to fetch external secret-store credentials and Red Hat subscription and Insights secrets, arbitrary file write of TLS session keys, and potential native code execution in the control-plane process, escalating an application administrator to compromise of the control plane and all tenant secrets.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-15 - External Control of System or Configuration Setting

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84680

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching a Galaxy or Automation Hub credential to an organization through the galaxy_credentials relationship endpoint, the controller verifies only that the requesting user can read the credential, rather than that they hold use permission on it, unlike other credential consumption in the product. An authenticated user who administers one organization and has read-only visibility of a credential in another organization -- for example a platform auditor -- can bind that foreign credential to their own organization. On the next project synchronization the controller decrypts the credential server-side and uses its token to authenticate to the credential owner's Automation Hub, allowing cross-tenant use of another organization's secret.

4.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

CWE-863 - Incorrect Authorization

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84683

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command, project update, and inventory update standard output escapes HTML metacharacters but does not remove ANSI terminal escape sequences before conversion to HTML. An ANSI OSC 8 hyperlink sequence in the output is expanded into an HTML anchor whose href is not scheme- filtered or escaped, so a low-privileged user who can produce output -- or an external party whose data a playbook echoes -- can embed a javascript: link that is rendered into a text/html response with no Content-Security-Policy. When a higher-privileged user views the output page and clicks the link, attacker- controlled JavaScript executes in their authenticated session, allowing actions as that user up to full platform takeover.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84684

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching a source inventory to a constructed inventory through the input_inventories relationship endpoint, the controller verifies only that the requesting user can read the source inventory, rather than that they hold use permission on it, unlike instance group attachment on the same access class. An authenticated user who can administer a constructed inventory and has read-only visibility of an inventory in another organization -- for example an organization or system auditor -- can attach that foreign inventory as an input. On synchronization the controller clones every host and host variable, including secrets, into the attacker's inventory, and because the attacker administers the constructed inventory they can run ad hoc commands against the cloned hosts, resulting in cross-tenant disclosure of inventory data and secrets and code execution against another tenant's managed hosts.

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-863 - Incorrect Authorization

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84686

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Notification template password fields are encrypted with a key derived from the secret key, the object primary key, and the field name, but not the subfield name, and the API returns the full ciphertext of a password subfield after the notification type is changed to one that does not define that subfield. A user with administrative access to a single notification template, but without any wider privilege, can switch the template type to reveal the stored ciphertext, replant that ciphertext into a webhook password field pointing at a server they control, and trigger a test notification. The controller decrypts the replayed ciphertext to the original plaintext and sends it to the attacker's server in an HTTP Basic authorization header, allowing recovery of Slack, PagerDuty, Twilio, AWS SNS, and Grafana credentials the administrator was only permitted to use, not read.

7.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

CWE-522 - Insufficiently Protected Credentials

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84689

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The bulk job launch endpoint builds workflow job nodes from client input using a serializer that leaves the node's job reference -- a field normally set by the workflow task manager after it spawns a child job -- writable and does not include it in the permission validation performed for the other node fields. An authenticated user with permission to execute a single job template can submit a bulk job launch whose node references the identifier of any unified job in any organization, including jobs they cannot access. The node then exposes that job's metadata, and cancelling the attacker's workflow cancels the referenced job through the workflow cancellation cascade, without any per-job authorization check. Repeated, this allows a low-privileged user to cancel running jobs, project and inventory syncs, ad hoc commands, and system jobs across all organizations, denying automation service platform-wide.

8.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84691

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-controlled Python format-string template that is rendered with a live user object as an argument. Because Python string formatting permits attribute and item traversal on its arguments, an administrator can craft a template that walks from the user object into the application settings and reads the Django secret key and the database password. The formatted message is written to a logger that can be forwarded to an external log aggregator, whose destination is also administrator-controlled, allowing the secrets to be sent off the host. An authenticated administrator can thereby obtain the master encryption key used to protect all stored credentials and the database service password, enabling offline decryption of every stored credential, forgery of user sessions, and direct access to the controller database.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-134 - Use of Externally-Controlled Format String

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84692

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The execute-permission check on a workflow job template node's unified job template is skipped when the node's currently stored unified job template is empty: the check inspects only the existing value, not the incoming one, and a node can be created without a unified job template. An authenticated user who holds admin permission on a single workflow job template can create an empty node and then patch it to reference any job template, project, inventory source, system job, or workflow on the platform -- including ones in other organizations that they cannot otherwise read or launch. Running their own workflow then executes the victim template with the victim's attached credentials, inventory and project, resulting in cross-organization privilege escalation to arbitrary automation execution. The patch response also discloses the victim template's name and description.

8.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N

CWE-863 - Incorrect Authorization

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84703

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. When creating or editing an execution environment, the controller does not verify that the requesting user has use permission on the container registry credential referenced by the execution environment; it validates only the organization and the credential kind. An authenticated user who is an execution-environment admin of one organization can associate a container registry credential belonging to a different organization -- one they cannot otherwise read, list, or use -- to an execution environment they control. When a job runs with that execution environment, the controller decrypts the foreign credential's registry password and supplies it to the container runtime, disclosing another organization's registry credentials across the tenant boundary.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84706

A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable injector validates variable names against a deny-list (an ANSIBLE_* prefix check plus a fixed ENV_BLOCKLIST) that omits process-hijacking loader variables such as BASH_ENV, ENV, LD_PRELOAD, LD_LIBRARY_PATH, PYTHONSTARTUP and GIT_SSH_COMMAND. Combined with the credential file injector, a privileged user can write an attacker-controlled script into the execution environment and point BASH_ENV at it, obtaining arbitrary code execution inside the execution-environment container for any job that attaches a credential of that type.

7.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N

CWE-184 - Incomplete List of Disallowed Inputs

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84707

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The host_filter query parameter on the hosts list API is parsed into a raw Django ORM filter whose lookup path is validated only against a sensitive-field blocklist, with no authorization check on the database relations it traverses. Because job event and ad-hoc command output fields are not on that blocklist, an authenticated user holding only the Read role on an inventory can construct filters that traverse into the output of jobs they have no permission to view and use the returned host count as a boolean oracle. Using regular-expression lookups, the attacker can extract, character by character, the output (which routinely contains plaintext credentials, tokens, and command results) of jobs and ad-hoc commands belonging to other organizations, resulting in cross-tenant disclosure of job output

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84708

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. A user with the delegated Instance Group Admin role on a container group can set a free-form pod specification override that is deep-merged, without filtering, into every job pod launched on that group. The only hardening applied is forcing automountServiceAccountToken to false, which does not remove an explicitly declared projected serviceAccountToken volume or secret volume mounts. A non-superuser can therefore cause the kubelet to mint a ServiceAccount token for the control-plane automation-controller service account into the job container and mount arbitrary secrets from the control-plane namespace, obtaining the control-plane service-account identity on the Kubernetes API and cleartext control-plane secrets (including the platform database password and Django SECRET_KEY), leading to full platform data compromise.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-266 - Incorrect Privilege Assignment

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84709

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. When a custom credential type is created or updated, the injector configuration is validated by rendering each attacker-supplied Jinja2 template synchronously inside the web request worker, with no limit on iteration count, output size, or execution time. An authenticated superuser can submit a credential type whose injector contains deeply nested loops or large string operations, consuming CPU and wall-clock time in the web worker until it is killed by the request timeout; issuing enough concurrent requests places all web workers into a kill-and-respawn loop, making the Controller API and UI unavailable for the duration of the attack. Additionally, certain template constructs raise exception types that the validator does not handle, resulting in an unhandled server error (HTTP 500) instead of a clean validation error. The rendering sandbox prevents code execution, so there is no confidentiality or integrity impact.

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84711

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The Project SCM branch and SCM refspec fields are accepted without rejecting values that begin with a dash and are passed to the git module during project synchronization, where they reach a `git checkout`/`git fetch` command line as bare arguments with no end-of-options separator. An authenticated user permitted to create or edit a project can set the SCM branch to a git option such as `--pathspec-from-file=<path>`, causing git to read an arbitrary file on the synchronization host and reflect its contents back through the project-update output. Because project synchronization runs on the control-plane host on default OpenShift Operator deployments, an attacker can read the control-plane Kubernetes ServiceAccount token, the Controller SECRET_KEY, and the database credentials, leading to full compromise of the Automation Platform and its Kubernetes namespace. System administrator privileges are not required and the impact crosses tenants.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84712

A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ (ApiV2PingView, AllowAny) over-serializes RBAC-gated automation-mesh data into its anonymous response, exposing the full instance inventory (node hostnames, node types, UUIDs, heartbeats, capacities, and exact versions), all instance-group names and membership, the deployment install UUID, and the active control node. A remote, unauthenticated attacker can use this to map the control plane and fingerprint software versions for targeted attacks. This flaw affects confidentiality only; it does not expose secrets, credentials, or tenant data.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control Sphere

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84714

A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function uses two regular expressions to reject user-supplied Jinja, but the patterns stop at the first interior '}' or '%' character, so a Jinja expression containing an inner brace (for example an empty dict) is accepted while remaining valid Jinja. Because sanitize_jinja() is the sole guard on several launch-time fields — ad-hoc command module_args, Machine-credential username / become_method / become_user, and inventory host names — a low-privileged user can inject Jinja that ansible-core evaluates in the execution environment. This enables execution of arbitrary commands in the execution environment (bypassing an administrator's AD_HOC_COMMANDS module allowlist) and disclosure of secrets belonging to credentials the attacker cannot read (by templating a co-attached credential's injected environment variables), across the credential access-control boundary.

7.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE-184 - Incomplete List of Disallowed Inputs

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84716

A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an execution/hop node's install bundle, the controller signs an X.509 certificate with the receptor mesh certificate authority in which the Common Name, DNS subject-alternative-name, and receptor node-id are taken verbatim from the caller-chosen instance hostname, with a hard-coded ten-year validity, a random serial, and no issuance log or revocation list. Because the hostname charset validator is case-insensitive while the uniqueness validator is case-sensitive, an administrator can register a case variant of an existing control node's hostname and obtain a mesh-CA-signed certificate that TLS peers, which match hostnames case-insensitively, accept as that control node. In managed/hosted deployments — where the customer holds controller superuser but the platform operator runs the mesh — this yields a long-lived, non-revocable mesh peer credential and, with an on-path position, TLS impersonation or interception of control/hybrid mesh nodes. It does not grant direct remote code execution, because receptor work submission is gated by a separate signing key not included in the bundle.

6.6 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N

CWE-266 - Incorrect Privilege Assignment

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84717

A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center webhook receiver skips HMAC signature verification for diagnostics:ping events after it has already looked up the target template, causing the endpoint to return HTTP 200 for a template that has a Bitbucket DC webhook configured and HTTP 403 otherwise. An unauthenticated remote attacker can use this response discrepancy as an oracle to enumerate which Job Template and Workflow Job Template IDs have Bitbucket DC webhooks configured, without knowing the secret webhook_key.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-204 - Observable Response Discrepancy

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84718

A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configuration, the Controller trusts the client-supplied X-Forwarded-For header as the request's client IP without verifying that it originated from a trusted proxy, and selects the leftmost (attacker-controlled) header value. As a result, an attacker can forge the source IP address recorded for their requests in the Controller's audit and access logs, degrading the integrity of forensic and SIEM attribution. The flaw does not grant additional access.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-348 - Use of Less Trusted Source

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84719

A flaw was found in the Ansible Automation Platform automation-controller. When a WorkflowJobTemplate is copied, the deep-copy permission sanitizer validates only the inventory, unified_job_template, and credentials of each cloned node and fails to check the instance_groups (and execution_environment and labels) that were preserved from the original. A user with organization workflow-admin permission but no role on the referenced instance groups can copy a workflow, become its administrator, and launch jobs pinned to instance groups they are not authorized to use — including the control-plane instance group — bypassing the InstanceGroup use_role boundary and causing attacker-influenced automation to run in the control-plane execution context.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-862 - Missing Authorization

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84720

A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode.ancestor_artifacts database column, which stores the raw merged set_stats artifacts propagated between workflow nodes, is not wrapped in prevent_search() and is therefore accepted for arbitrary field lookups by the REST filter backend, even though it is omitted from the API serializer. Because the column is persisted before Ansible's no_log masking is applied, a user with only read access to a workflow — or, via a regular-expression lookup that bypasses the JSON cross-relation filter guard through the world-readable credential-types endpoint, any authenticated user with no roles — can use the result count as a boolean/count oracle to recover, character by character, secret values that a playbook author explicitly marked no_log, including across organizations.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens the management-command argument list into a single string with spaces before the job runner re-splits it, so spaces in the value become additional command-line arguments. Because system jobs are executed in-process on the control node without the container isolation applied to all other job types, an authenticated user with superuser privileges can inject arbitrary arguments — including Python's path option — into the control-plane awx-manage process, controlling its argument vector and the first entry of its module search path. Full remote code execution requires an additional import gadget that is not present in the current management commands, so the demonstrated impact is argument injection with control of the process search path rather than confirmed code execution.

6.6 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-85393

A flaw was found in node-forge. This vulnerability allows a remote attacker to forge valid RSA PKCS#1 v1.5 signatures for arbitrary messages. The flaw occurs because the software fails to properly validate the element count in nested DigestAlgorithm sequences during signature verification. By embedding specially crafted data, an attacker can bypass signature validation, leading to potential integrity compromise.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-1284 - Improper Validation of Specified Quantity in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-82417

Known not affected 114 products, the same list as for CVE-2026-82417

Threats

Impact Important

CVE-2026-87817

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can then place a malicious pre-commit hook in the tracked hooks directory, which executes when a victim calls index.commit() on a cloned or opened repository.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2026-12564

Known not affected 114 products, the same list as for CVE-2026-12564

Threats

Impact Important

References

581 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:71179	self
https://access.redhat.com/security/cve/CVE-2025-57847	external
https://access.redhat.com/security/cve/CVE-2025-66418	external
https://access.redhat.com/security/cve/CVE-2026-12564	external
https://access.redhat.com/security/cve/CVE-2026-14257	external
https://access.redhat.com/security/cve/CVE-2026-15307	external
https://access.redhat.com/security/cve/CVE-2026-33818	external
https://access.redhat.com/security/cve/CVE-2026-42215	external
https://access.redhat.com/security/cve/CVE-2026-42284	external
https://access.redhat.com/security/cve/CVE-2026-42504	external
https://access.redhat.com/security/cve/CVE-2026-44244	external
https://access.redhat.com/security/cve/CVE-2026-49825	external
https://access.redhat.com/security/cve/CVE-2026-53488	external
https://access.redhat.com/security/cve/CVE-2026-53492	external
https://access.redhat.com/security/cve/CVE-2026-54284	external
https://access.redhat.com/security/cve/CVE-2026-56853	external
https://access.redhat.com/security/cve/CVE-2026-56858	external
https://access.redhat.com/security/cve/CVE-2026-56859	external
https://access.redhat.com/security/cve/CVE-2026-56860	external
https://access.redhat.com/security/cve/CVE-2026-56862	external
https://access.redhat.com/security/cve/CVE-2026-59877	external
https://access.redhat.com/security/cve/CVE-2026-59893	external
https://access.redhat.com/security/cve/CVE-2026-67322	external
https://access.redhat.com/security/cve/CVE-2026-67323	external
https://access.redhat.com/security/cve/CVE-2026-67325	external
https://access.redhat.com/security/cve/CVE-2026-69152	external
https://access.redhat.com/security/cve/CVE-2026-69153	external
https://access.redhat.com/security/cve/CVE-2026-69244	external
https://access.redhat.com/security/cve/CVE-2026-71458	external
https://access.redhat.com/security/cve/CVE-2026-71459	external
https://access.redhat.com/security/cve/CVE-2026-71460	external
https://access.redhat.com/security/cve/CVE-2026-71462	external
https://access.redhat.com/security/cve/CVE-2026-71463	external
https://access.redhat.com/security/cve/CVE-2026-71464	external
https://access.redhat.com/security/cve/CVE-2026-71465	external
https://access.redhat.com/security/cve/CVE-2026-71491	external
https://access.redhat.com/security/cve/CVE-2026-73086	external
https://access.redhat.com/security/cve/CVE-2026-73620	external
https://access.redhat.com/security/cve/CVE-2026-73622	external
https://access.redhat.com/security/cve/CVE-2026-73623	external
https://access.redhat.com/security/cve/CVE-2026-73624	external
https://access.redhat.com/security/cve/CVE-2026-73625	external
https://access.redhat.com/security/cve/CVE-2026-75884	external
https://access.redhat.com/security/cve/CVE-2026-75899	external
https://access.redhat.com/security/cve/CVE-2026-75931	external
https://access.redhat.com/security/cve/CVE-2026-75975	external
https://access.redhat.com/security/cve/CVE-2026-76172	external
https://access.redhat.com/security/cve/CVE-2026-76218	external
https://access.redhat.com/security/cve/CVE-2026-76219	external
https://access.redhat.com/security/cve/CVE-2026-76220	external
https://access.redhat.com/security/cve/CVE-2026-76221	external
https://access.redhat.com/security/cve/CVE-2026-76222	external
https://access.redhat.com/security/cve/CVE-2026-78676	external
https://access.redhat.com/security/cve/CVE-2026-78679	external
https://access.redhat.com/security/cve/CVE-2026-82417	external
https://access.redhat.com/security/cve/CVE-2026-84292	external
https://access.redhat.com/security/cve/CVE-2026-84375	external
https://access.redhat.com/security/cve/CVE-2026-84394	external
https://access.redhat.com/security/cve/CVE-2026-84470	external
https://access.redhat.com/security/cve/CVE-2026-84474	external
https://access.redhat.com/security/cve/CVE-2026-84486	external
https://access.redhat.com/security/cve/CVE-2026-84499	external
https://access.redhat.com/security/cve/CVE-2026-84502	external
https://access.redhat.com/security/cve/CVE-2026-84638	external
https://access.redhat.com/security/cve/CVE-2026-84643	external
https://access.redhat.com/security/cve/CVE-2026-84644	external
https://access.redhat.com/security/cve/CVE-2026-84679	external
https://access.redhat.com/security/cve/CVE-2026-84680	external
https://access.redhat.com/security/cve/CVE-2026-84683	external
https://access.redhat.com/security/cve/CVE-2026-84684	external
https://access.redhat.com/security/cve/CVE-2026-84686	external
https://access.redhat.com/security/cve/CVE-2026-84689	external
https://access.redhat.com/security/cve/CVE-2026-84691	external
https://access.redhat.com/security/cve/CVE-2026-84692	external
https://access.redhat.com/security/cve/CVE-2026-84703	external
https://access.redhat.com/security/cve/CVE-2026-84706	external
https://access.redhat.com/security/cve/CVE-2026-84707	external
https://access.redhat.com/security/cve/CVE-2026-84708	external
https://access.redhat.com/security/cve/CVE-2026-84709	external
https://access.redhat.com/security/cve/CVE-2026-84711	external
https://access.redhat.com/security/cve/CVE-2026-84712	external
https://access.redhat.com/security/cve/CVE-2026-84714	external
https://access.redhat.com/security/cve/CVE-2026-84716	external
https://access.redhat.com/security/cve/CVE-2026-84717	external
https://access.redhat.com/security/cve/CVE-2026-84718	external
https://access.redhat.com/security/cve/CVE-2026-84719	external
https://access.redhat.com/security/cve/CVE-2026-84720	external
https://access.redhat.com/security/cve/CVE-2026-84724	external
https://access.redhat.com/security/cve/CVE-2026-85393	external
https://access.redhat.com/security/cve/CVE-2026-87817	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-57847	self
https://bugzilla.redhat.com/show_bug.cgi?id=2391092	external
https://www.cve.org/CVERecord?id=CVE-2025-57847	external
https://nvd.nist.gov/vuln/detail/CVE-2025-57847	external
https://access.redhat.com/security/cve/CVE-2025-66418	self
https://bugzilla.redhat.com/show_bug.cgi?id=2419455	external
https://www.cve.org/CVERecord?id=CVE-2025-66418	external
https://nvd.nist.gov/vuln/detail/CVE-2025-66418	external
https://github.com/urllib3/urllib3/commit/24d7b67…	external
https://github.com/urllib3/urllib3/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-12564	self
https://bugzilla.redhat.com/show_bug.cgi?id=2490556	external
https://www.cve.org/CVERecord?id=CVE-2026-12564	external
https://nvd.nist.gov/vuln/detail/CVE-2026-12564	external
https://access.redhat.com/security/cve/CVE-2026-14257	self
https://bugzilla.redhat.com/show_bug.cgi?id=2506433	external
https://www.cve.org/CVERecord?id=CVE-2026-14257	external
https://nvd.nist.gov/vuln/detail/CVE-2026-14257	external
https://github.com/juliangruber/brace-expansion	external
https://github.com/juliangruber/brace-expansion/c…	external
https://www.npmjs.com/package/brace-expansion	external
https://access.redhat.com/security/cve/CVE-2026-15307	self
https://bugzilla.redhat.com/show_bug.cgi?id=2511095	external
https://www.cve.org/CVERecord?id=CVE-2026-15307	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15307	external
https://docs.djangoproject.com/en/dev/releases/se…	external
https://github.com/django/django/commit/115ffd046…	external
https://github.com/django/django/commit/208f80cb6…	external
https://github.com/django/django/commit/39b3e2d0c…	external
https://github.com/django/django/commit/f1949c1f9…	external
https://groups.google.com/g/django-announce	external
https://www.djangoproject.com/weblog/2026/aug/04/…	external
https://access.redhat.com/security/cve/CVE-2026-33818	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815	external
https://www.cve.org/CVERecord?id=CVE-2026-33818	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818	external
https://go.dev/cl/814980	external
https://go.dev/issue/80405	external
https://groups.google.com/g/golang-announce/c/94p…	external
https://pkg.go.dev/vuln/GO-2026-5972	external
https://access.redhat.com/security/cve/CVE-2026-42215	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467802	external
https://www.cve.org/CVERecord?id=CVE-2026-42215	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42215	external
https://github.com/gitpython-developers/GitPython…	external
https://github.com/gitpython-developers/GitPython…	external
https://access.redhat.com/security/cve/CVE-2026-42284	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467800	external
https://www.cve.org/CVERecord?id=CVE-2026-42284	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42284	external
https://github.com/gitpython-developers/GitPython…	external
https://access.redhat.com/security/cve/CVE-2026-42504	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484204	external
https://www.cve.org/CVERecord?id=CVE-2026-42504	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42504	external
https://go.dev/cl/774481	external
https://go.dev/issue/79217	external
https://groups.google.com/g/golang-announce/c/tKs…	external
https://pkg.go.dev/vuln/GO-2026-5038	external
https://access.redhat.com/security/cve/CVE-2026-44244	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467804	external
https://www.cve.org/CVERecord?id=CVE-2026-44244	external
https://nvd.nist.gov/vuln/detail/CVE-2026-44244	external
https://github.com/gitpython-developers/GitPython…	external
https://github.com/gitpython-developers/GitPython…	external
https://access.redhat.com/security/cve/CVE-2026-49825	self
https://bugzilla.redhat.com/show_bug.cgi?id=2520368	external
https://www.cve.org/CVERecord?id=CVE-2026-49825	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49825	external
https://github.com/fedora-python/lxml_html_clean/…	external
https://github.com/fedora-python/lxml_html_clean/…	external
https://github.com/fedora-python/lxml_html_clean/…	external
https://github.com/lxml/lxml/commit/5927a6d5e8518…	external
https://github.com/lxml/lxml/releases/tag/lxml-6.1.1	external
https://access.redhat.com/security/cve/CVE-2026-53488	self
https://bugzilla.redhat.com/show_bug.cgi?id=2495815	external
https://www.cve.org/CVERecord?id=CVE-2026-53488	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53488	external
https://github.com/containerd/containerd/security…	external
https://access.redhat.com/security/cve/CVE-2026-53492	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496130	external
https://www.cve.org/CVERecord?id=CVE-2026-53492	external
https://nvd.nist.gov/vuln/detail/CVE-2026-53492	external
https://github.com/containerd/containerd/security…	external
https://access.redhat.com/security/cve/CVE-2026-54284	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517527	external
https://www.cve.org/CVERecord?id=CVE-2026-54284	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54284	external
https://github.com/andialbrecht/sqlparse/commit/9…	external
https://github.com/andialbrecht/sqlparse/security…	external
https://access.redhat.com/security/cve/CVE-2026-56853	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827	external
https://www.cve.org/CVERecord?id=CVE-2026-56853	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853	external
https://go.dev/cl/795540	external
https://go.dev/issue/80205	external
https://pkg.go.dev/vuln/GO-2026-6089	external
https://access.redhat.com/security/cve/CVE-2026-56858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838	external
https://www.cve.org/CVERecord?id=CVE-2026-56858	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858	external
https://go.dev/cl/807100	external
https://go.dev/issue/80435	external
https://pkg.go.dev/vuln/GO-2026-6091	external
https://access.redhat.com/security/cve/CVE-2026-56859	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840	external
https://www.cve.org/CVERecord?id=CVE-2026-56859	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859	external
https://go.dev/cl/803320	external
https://go.dev/issue/80481	external
https://pkg.go.dev/vuln/GO-2026-6088	external
https://access.redhat.com/security/cve/CVE-2026-56860	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820	external
https://www.cve.org/CVERecord?id=CVE-2026-56860	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860	external
https://go.dev/cl/803681	external
https://go.dev/issue/80494	external
https://pkg.go.dev/vuln/GO-2026-6218	external
https://access.redhat.com/security/cve/CVE-2026-56862	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839	external
https://www.cve.org/CVERecord?id=CVE-2026-56862	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862	external
https://go.dev/cl/804261	external
https://go.dev/issue/80528	external
https://pkg.go.dev/vuln/GO-2026-6090	external
https://access.redhat.com/security/cve/CVE-2026-59877	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498127	external
https://www.cve.org/CVERecord?id=CVE-2026-59877	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59877	external
https://github.com/protobufjs/protobuf.js/commit/…	external
https://github.com/protobufjs/protobuf.js/commit/…	external
https://github.com/protobufjs/protobuf.js/pull/2352	external
https://github.com/protobufjs/protobuf.js/release…	external
https://github.com/protobufjs/protobuf.js/release…	external
https://github.com/protobufjs/protobuf.js/securit…	external
https://access.redhat.com/security/cve/CVE-2026-59893	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517523	external
https://www.cve.org/CVERecord?id=CVE-2026-59893	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59893	external
https://github.com/andialbrecht/sqlparse/commit/d…	external
https://github.com/andialbrecht/sqlparse/security…	external
https://access.redhat.com/security/cve/CVE-2026-67322	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510021	external
https://www.cve.org/CVERecord?id=CVE-2026-67322	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67322	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-67323	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509976	external
https://www.cve.org/CVERecord?id=CVE-2026-67323	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67323	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-67325	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509975	external
https://www.cve.org/CVERecord?id=CVE-2026-67325	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67325	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-69152	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722	external
https://www.cve.org/CVERecord?id=CVE-2026-69152	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/s…	external
https://access.redhat.com/security/cve/CVE-2026-69153	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510719	external
https://www.cve.org/CVERecord?id=CVE-2026-69153	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69153	external
https://github.com/postcss/postcss/commit/7beca13…	external
https://github.com/postcss/postcss/releases/tag/8.5.19	external
https://github.com/postcss/postcss/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-69244	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510825	external
https://www.cve.org/CVERecord?id=CVE-2026-69244	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69244	external
https://github.com/aio-libs/aiohttp/commit/49f65d…	external
https://github.com/aio-libs/aiohttp/pull/13223	external
https://github.com/aio-libs/aiohttp/releases/tag/…	external
https://github.com/aio-libs/aiohttp/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-71458	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512367	external
https://www.cve.org/CVERecord?id=CVE-2026-71458	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71458	external
https://access.redhat.com/security/cve/CVE-2026-71459	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512368	external
https://www.cve.org/CVERecord?id=CVE-2026-71459	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71459	external
https://access.redhat.com/security/cve/CVE-2026-71460	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512369	external
https://www.cve.org/CVERecord?id=CVE-2026-71460	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71460	external
https://access.redhat.com/security/cve/CVE-2026-71462	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512371	external
https://www.cve.org/CVERecord?id=CVE-2026-71462	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71462	external
https://access.redhat.com/security/cve/CVE-2026-71463	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512372	external
https://www.cve.org/CVERecord?id=CVE-2026-71463	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71463	external
https://access.redhat.com/security/cve/CVE-2026-71464	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512374	external
https://www.cve.org/CVERecord?id=CVE-2026-71464	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71464	external
https://access.redhat.com/security/cve/CVE-2026-71465	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512375	external
https://www.cve.org/CVERecord?id=CVE-2026-71465	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71465	external
https://access.redhat.com/security/cve/CVE-2026-71491	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517518	external
https://www.cve.org/CVERecord?id=CVE-2026-71491	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71491	external
https://github.com/andialbrecht/sqlparse/commit/e…	external
https://github.com/andialbrecht/sqlparse/security…	external
https://access.redhat.com/security/cve/CVE-2026-73086	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514175	external
https://www.cve.org/CVERecord?id=CVE-2026-73086	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73086	external
https://github.com/ai/nanoid/commit/7087969281cab…	external
https://github.com/ai/nanoid/commit/821dfed7b5db7…	external
https://github.com/ai/nanoid/commit/b0036ed60dc9f…	external
https://github.com/ai/nanoid/releases/tag/3.3.12	external
https://github.com/ai/nanoid/releases/tag/5.1.11	external
https://github.com/ai/nanoid/security/advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-73620	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515261	external
https://www.cve.org/CVERecord?id=CVE-2026-73620	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73620	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-73622	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515269	external
https://www.cve.org/CVERecord?id=CVE-2026-73622	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73622	external
https://github.com/gitpython-developers/GitPython…	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-73623	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515275	external
https://www.cve.org/CVERecord?id=CVE-2026-73623	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73623	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-73624	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515243	external
https://www.cve.org/CVERecord?id=CVE-2026-73624	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73624	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-73625	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515272	external
https://www.cve.org/CVERecord?id=CVE-2026-73625	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73625	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-75884	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517893	external
https://www.cve.org/CVERecord?id=CVE-2026-75884	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75884	external
https://access.redhat.com/security/cve/CVE-2026-75899	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521778	external
https://www.cve.org/CVERecord?id=CVE-2026-75899	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75899	external
https://cna.openjsf.org/security-advisories.html	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-75931	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521777	external
https://www.cve.org/CVERecord?id=CVE-2026-75931	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75931	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-75975	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521779	external
https://www.cve.org/CVERecord?id=CVE-2026-75975	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75975	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-76172	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521798	external
https://www.cve.org/CVERecord?id=CVE-2026-76172	external
https://nvd.nist.gov/vuln/detail/CVE-2026-76172	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-76218	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519603	external
https://www.cve.org/CVERecord?id=CVE-2026-76218	external
https://nvd.nist.gov/vuln/detail/CVE-2026-76218	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-76219	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519597	external
https://www.cve.org/CVERecord?id=CVE-2026-76219	external
https://nvd.nist.gov/vuln/detail/CVE-2026-76219	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-76220	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519610	external
https://www.cve.org/CVERecord?id=CVE-2026-76220	external
https://nvd.nist.gov/vuln/detail/CVE-2026-76220	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-76221	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519596	external
https://www.cve.org/CVERecord?id=CVE-2026-76221	external
https://nvd.nist.gov/vuln/detail/CVE-2026-76221	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-76222	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519609	external
https://www.cve.org/CVERecord?id=CVE-2026-76222	external
https://nvd.nist.gov/vuln/detail/CVE-2026-76222	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-78676	self
https://bugzilla.redhat.com/show_bug.cgi?id=2523197	external
https://www.cve.org/CVERecord?id=CVE-2026-78676	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78676	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-78679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2523205	external
https://www.cve.org/CVERecord?id=CVE-2026-78679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78679	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-82417	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525936	external
https://www.cve.org/CVERecord?id=CVE-2026-82417	external
https://nvd.nist.gov/vuln/detail/CVE-2026-82417	external
https://github.com/ljharb/qs/commit/e83d321ffafb3…	external
https://github.com/ljharb/qs/security/advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-84292	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527747	external
https://www.cve.org/CVERecord?id=CVE-2026-84292	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84292	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-84375	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527118	external
https://www.cve.org/CVERecord?id=CVE-2026-84375	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84375	external
https://github.com/nodeca/js-yaml/commit/3485bc06…	external
https://github.com/nodeca/js-yaml/commit/6a8e05f9…	external
https://github.com/nodeca/js-yaml/commit/d90b6612…	external
https://github.com/nodeca/js-yaml/pull/797	external
https://github.com/nodeca/js-yaml/releases/tag/3.15.2	external
https://github.com/nodeca/js-yaml/releases/tag/4.3.2	external
https://github.com/nodeca/js-yaml/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-84394	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527756	external
https://www.cve.org/CVERecord?id=CVE-2026-84394	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84394	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-84470	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527046	external
https://www.cve.org/CVERecord?id=CVE-2026-84470	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84470	external
https://access.redhat.com/security/cve/CVE-2026-84474	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527073	external
https://www.cve.org/CVERecord?id=CVE-2026-84474	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84474	external
https://access.redhat.com/security/cve/CVE-2026-84486	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527085	external
https://www.cve.org/CVERecord?id=CVE-2026-84486	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84486	external
https://access.redhat.com/security/cve/CVE-2026-84499	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527090	external
https://www.cve.org/CVERecord?id=CVE-2026-84499	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84499	external
https://access.redhat.com/security/cve/CVE-2026-84502	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527096	external
https://www.cve.org/CVERecord?id=CVE-2026-84502	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84502	external
https://access.redhat.com/security/cve/CVE-2026-84638	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527100	external
https://www.cve.org/CVERecord?id=CVE-2026-84638	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84638	external
https://access.redhat.com/security/cve/CVE-2026-84643	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527112	external
https://www.cve.org/CVERecord?id=CVE-2026-84643	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84643	external
https://access.redhat.com/security/cve/CVE-2026-84644	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527117	external
https://www.cve.org/CVERecord?id=CVE-2026-84644	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84644	external
https://access.redhat.com/security/cve/CVE-2026-84679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527123	external
https://www.cve.org/CVERecord?id=CVE-2026-84679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84679	external
https://access.redhat.com/security/cve/CVE-2026-84680	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527126	external
https://www.cve.org/CVERecord?id=CVE-2026-84680	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84680	external
https://access.redhat.com/security/cve/CVE-2026-84683	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527128	external
https://www.cve.org/CVERecord?id=CVE-2026-84683	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84683	external
https://access.redhat.com/security/cve/CVE-2026-84684	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527139	external
https://www.cve.org/CVERecord?id=CVE-2026-84684	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84684	external
https://access.redhat.com/security/cve/CVE-2026-84686	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527140	external
https://www.cve.org/CVERecord?id=CVE-2026-84686	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84686	external
https://access.redhat.com/security/cve/CVE-2026-84689	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527145	external
https://www.cve.org/CVERecord?id=CVE-2026-84689	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84689	external
https://access.redhat.com/security/cve/CVE-2026-84691	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527151	external
https://www.cve.org/CVERecord?id=CVE-2026-84691	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84691	external
https://access.redhat.com/security/cve/CVE-2026-84692	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527154	external
https://www.cve.org/CVERecord?id=CVE-2026-84692	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84692	external
https://access.redhat.com/security/cve/CVE-2026-84703	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527156	external
https://www.cve.org/CVERecord?id=CVE-2026-84703	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84703	external
https://access.redhat.com/security/cve/CVE-2026-84706	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527187	external
https://www.cve.org/CVERecord?id=CVE-2026-84706	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84706	external
https://access.redhat.com/security/cve/CVE-2026-84707	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527189	external
https://www.cve.org/CVERecord?id=CVE-2026-84707	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84707	external
https://access.redhat.com/security/cve/CVE-2026-84708	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527190	external
https://www.cve.org/CVERecord?id=CVE-2026-84708	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84708	external
https://access.redhat.com/security/cve/CVE-2026-84709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527191	external
https://www.cve.org/CVERecord?id=CVE-2026-84709	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84709	external
https://access.redhat.com/security/cve/CVE-2026-84711	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527195	external
https://www.cve.org/CVERecord?id=CVE-2026-84711	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84711	external
https://access.redhat.com/security/cve/CVE-2026-84712	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527196	external
https://www.cve.org/CVERecord?id=CVE-2026-84712	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84712	external
https://access.redhat.com/security/cve/CVE-2026-84714	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527198	external
https://www.cve.org/CVERecord?id=CVE-2026-84714	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84714	external
https://access.redhat.com/security/cve/CVE-2026-84716	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527199	external
https://www.cve.org/CVERecord?id=CVE-2026-84716	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84716	external
https://access.redhat.com/security/cve/CVE-2026-84717	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527210	external
https://www.cve.org/CVERecord?id=CVE-2026-84717	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84717	external
https://access.redhat.com/security/cve/CVE-2026-84718	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527211	external
https://www.cve.org/CVERecord?id=CVE-2026-84718	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84718	external
https://access.redhat.com/security/cve/CVE-2026-84719	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527213	external
https://www.cve.org/CVERecord?id=CVE-2026-84719	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84719	external
https://access.redhat.com/security/cve/CVE-2026-84720	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527214	external
https://www.cve.org/CVERecord?id=CVE-2026-84720	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84720	external
https://access.redhat.com/security/cve/CVE-2026-84724	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527222	external
https://www.cve.org/CVERecord?id=CVE-2026-84724	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84724	external
https://access.redhat.com/security/cve/CVE-2026-85393	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528186	external
https://www.cve.org/CVERecord?id=CVE-2026-85393	external
https://nvd.nist.gov/vuln/detail/CVE-2026-85393	external
https://github.com/advisories/GHSA-ppp5-5v6c-4jwp	external
https://github.com/digitalbazaar/forge	external
https://github.com/digitalbazaar/forge/blob/v1.4.…	external
https://github.com/digitalbazaar/forge/blob/v1.4.…	external
https://github.com/digitalbazaar/forge/issues/1149	external
https://www.vulncheck.com/advisories/node-forge-t…	external
https://access.redhat.com/security/cve/CVE-2026-87817	self
https://bugzilla.redhat.com/show_bug.cgi?id=2530744	external
https://www.cve.org/CVERecord?id=CVE-2026-87817	external
https://nvd.nist.gov/vuln/detail/CVE-2026-87817	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external

Acknowledgments

Antony Di Scala Mike Whale

Red Hat Chris Meyers

Red Hat Laura Pardo

Independent security researcher Santosh Kumar Puppala

JSON

To clipboard

Loading 7.7 MB of JSON…

CVE-2025-57847 (GCVE-0-2025-57847)

Vulnerability from cvelistv5 – Published: 2026-04-08 13:55 – Updated: 2026-09-24 06:08

Title

Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions

Summary

Severity

6.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-08 15:42 UTC

CWE

CWE-276 - Incorrect Default Permissions

Assigner

redhat redhat root

References

13 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:42141	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42144	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66485	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66486	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66487	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67279	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71177	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71179	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71192	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71210	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-57847	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2391092	issue-trackingx_refsource_REDHAT

Impacted products

15 products

Vendor	Product	Version
Red Hat	Red Hat Ansible Automation Platform 2.16	Unaffected: 1789001438 , < * (rpm) cpe:/a:redhat:ansible_core:2.16::el8
Red Hat	Red Hat Ansible Automation Platform 2.16	Unaffected: 1789023765 , < * (rpm) cpe:/a:redhat:ansible_core:2.16::el9
Red Hat	Red Hat Ansible Automation Platform 2.18	Unaffected: 1789023329 , < * (rpm) cpe:/a:redhat:ansible_core:2.18::el8
Red Hat	Red Hat Ansible Automation Platform 2.18	Unaffected: 1789001715 , < * (rpm) cpe:/a:redhat:ansible_core:2.18::el9
Red Hat	Red Hat Ansible Automation Platform 2.5	Unaffected: 1784035663 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5	Unaffected: 1789634812 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5	Unaffected: 1784051694 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.5	Unaffected: 1789654540 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1789658734 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1789661423 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1789654312 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1788901236 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1789582543 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1789584820 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2

Date Public

2026-04-08 13:47

Credits

Red Hat would like to thank Antony Di Scala and Mike Whale for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-57847",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-08T15:42:54.958669Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-08T16:13:23.024Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_core:2.16::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform/ee-minimal-rhel8",
          "product": "Red Hat Ansible Automation Platform 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789001438",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_core:2.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform/ee-minimal-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789023765",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_core:2.18::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform/ee-minimal-rhel8",
          "product": "Red Hat Ansible Automation Platform 2.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789023329",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_core:2.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform/ee-minimal-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789001715",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-25/ee-minimal-rhel8",
          "product": "Red Hat Ansible Automation Platform 2.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1784035663",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-25/de-minimal-rhel8",
          "product": "Red Hat Ansible Automation Platform 2.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789634812",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-25/ee-minimal-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1784051694",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-25/de-minimal-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789654540",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-26/de-minimal-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789658734",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-26/de-supported-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789661423",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-26/ee-minimal-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789654312",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-27/ee-minimal-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788901236",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-27/de-minimal-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789582543",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-27/de-supported-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789584820",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-24/controller-rhel8",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-24/ee-29-rhel8",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-25/ansible-dev-tools-rhel8",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-25/controller-rhel8-operator",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-26/ee-supported-rhel9",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "unaffected",
          "packageName": "ansible-automation-platform/ee-29-rhel8",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-tech-preview/ansible-devspaces-rhel9",
          "product": "Red Hat Ansible Automation Platform 2",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Antony Di Scala and Mike Whale for reporting this issue."
        }
      ],
      "datePublic": "2026-04-08T13:47:09.259Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This vulnerability allows an attacker to add a new user with any arbitrary UID, including UID 0, gaining full root privileges within the container."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-276",
              "description": "Incorrect Default Permissions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T06:08:14.136Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:42141",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42141"
        },
        {
          "name": "RHSA-2026:42144",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42144"
        },
        {
          "name": "RHSA-2026:66482",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:66482"
        },
        {
          "name": "RHSA-2026:66485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:66485"
        },
        {
          "name": "RHSA-2026:66486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:66486"
        },
        {
          "name": "RHSA-2026:66487",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:66487"
        },
        {
          "name": "RHSA-2026:67279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:67279"
        },
        {
          "name": "RHSA-2026:71177",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71177"
        },
        {
          "name": "RHSA-2026:71179",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71179"
        },
        {
          "name": "RHSA-2026:71192",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71192"
        },
        {
          "name": "RHSA-2026:71210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71210"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2025-57847"
        },
        {
          "name": "RHBZ#2391092",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2391092"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-08-26T17:29:34.376Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-04-08T13:47:09.259Z",
          "value": "Made public."
        }
      ],
      "title": "Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-276: Incorrect Default Permissions"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2025-57847",
    "datePublished": "2026-04-08T13:55:00.729Z",
    "dateReserved": "2025-08-21T14:40:40.821Z",
    "dateUpdated": "2026-09-24T06:08:14.136Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-66418 (GCVE-0-2025-66418)

Vulnerability from cvelistv5 – Published: 2025-12-05 16:02 – Updated: 2025-12-05 18:15

Title

urllib3 allows an unbounded number of links in the decompression chain

Summary

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.

Severity

8.9 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-05 16:15 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/urllib3/urllib3/security/advis…	x_refsource_CONFIRM
https://github.com/urllib3/urllib3/commit/24d7b67…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
urllib3	urllib3	Affected: >= 1.24, < 2.6.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-66418",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-05T16:15:39.701596Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-05T16:16:08.790Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "urllib3",
          "vendor": "urllib3",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.24, \u003c 2.6.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.9,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-05T18:15:28.505Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
        },
        {
          "name": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
        }
      ],
      "source": {
        "advisory": "GHSA-gm62-xv2j-4w53",
        "discovery": "UNKNOWN"
      },
      "title": "urllib3 allows an unbounded number of links in the decompression chain"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-66418",
    "datePublished": "2025-12-05T16:02:15.271Z",
    "dateReserved": "2025-11-28T23:33:56.367Z",
    "dateUpdated": "2025-12-05T18:15:28.505Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12564 (GCVE-0-2026-12564)

Vulnerability from cvelistv5 – Published: 2026-08-18 15:50 – Updated: 2026-09-24 05:59

Title

Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf

Summary

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 19:43 UTC

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

redhat redhat root

References

7 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:67279	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71113	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71114	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71115	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71179	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-12564	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2490556	issue-trackingx_refsource_REDHAT

Impacted products

7 products

Vendor	Product	Version
Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 8	Unaffected: 0:4.5.36-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9
Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 9	Unaffected: 0:4.5.36-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:4.6.33-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8 cpe:/a:redhat:ansible_automation_platform:2.5::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:4.6.33-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8 cpe:/a:redhat:ansible_automation_platform:2.5::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:4.7.17-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10 cpe:/a:redhat:ansible_automation_platform:2.6::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10 cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1789673739 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1788918363 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9

Date Public

2026-07-17 00:00

Credits

This issue was discovered by Chris Meyers (Red Hat).

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12564",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T19:43:25.467171Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T19:53:20.539Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.5.36-1.el8ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.5.36-1.el9ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.6.33-1.el8ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.6.33-1.el9ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.6::el10",
            "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.7.17-1.el9ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-26/controller-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789673739",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-27/controller-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788918363",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "This issue was discovered by Chris Meyers (Red Hat)."
        }
      ],
      "datePublic": "2026-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the AAP Controller\u0027s HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashivault.py reads the controller pod\u0027s Kubernetes service account token and sends it to an attacker-controlled URL when a HashiCorp Vault Secret Lookup credential with kubernetes_role authentication is tested. An authenticated attacker with credential-creation privileges can exfiltrate the service account token, gaining Kubernetes API access to the control plane namespaces with full pod CRUD and secret read permissions, including database credentials and the Django SECRET_KEY."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Critical"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T05:59:57.362Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:67279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:67279"
        },
        {
          "name": "RHSA-2026:71113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71113"
        },
        {
          "name": "RHSA-2026:71114",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71114"
        },
        {
          "name": "RHSA-2026:71115",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71115"
        },
        {
          "name": "RHSA-2026:71179",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71179"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-12564"
        },
        {
          "name": "RHBZ#2490556",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490556"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-06-17T20:58:19.593Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-17T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf",
      "workarounds": [
        {
          "lang": "en",
          "value": "The following practices would help for avoiding exposure and mitigate this flaw:\n- Restrict network egress from controller pods using Kubernetes NetworkPolicy to prevent outbound connections to untrusted destinations. Only allow connections to known Vault server endpoints.\n- Review and restrict the RBAC permissions of the automation-controller service account to follow the principle of least privilege. Remove unnecessary secret read access.\n- In AAP Cloud environments, audit credential-creation activity for suspicious HashiCorp Vault credentials with external or unusual URLs.\n- Monitor Kubernetes audit logs for unexpected API calls using the automation-controller service account, particularly secret reads and pod operations from EE pods.\n- Rotate the automation-controller service account token if unauthorized access is suspected.\n- Consider restricting the \"create credential\" privilege to only trusted administrators until the fix is available."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-12564",
    "datePublished": "2026-08-18T15:50:54.646Z",
    "dateReserved": "2026-06-17T20:56:28.490Z",
    "dateUpdated": "2026-09-24T05:59:57.362Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-14257 (GCVE-0-2026-14257)

Vulnerability from cvelistv5 – Published: 2026-07-23 12:54 – Updated: 2026-07-23 14:44

Title

brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash

Summary

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 14:44 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

seal mitre root

References

3 references

URL	Tags
https://www.npmjs.com/package/brace-expansion
https://github.com/juliangruber/brace-expansion
https://github.com/juliangruber/brace-expansion/c…

Impacted products

1 product

Vendor	Product	Version
juliangruber	brace-expansion	Affected: 0 , ≤ 5.0.7 (semver)

Credits

bnbdr

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-14257",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T14:44:31.208878Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T14:44:41.856Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.npmjs.com/package/brace-expansion",
          "defaultStatus": "unaffected",
          "packageName": "brace-expansion",
          "platforms": [
            "Linux",
            "macOS",
            "Windows"
          ],
          "product": "brace-expansion",
          "vendor": "juliangruber",
          "versions": [
            {
              "lessThanOrEqual": "5.0.7",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "bnbdr"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ebrace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The \u003ccode\u003eexpand()\u003c/code\u003e function limits the number of results with a \u003ccode\u003emax\u003c/code\u003e option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input (\u003ccode\u003e\u0027{a,b}\u0027.repeat(1500)\u003c/code\u003e) crashes a default Node.js process. Any application that passes attacker-influenced strings to \u003ccode\u003ebrace-expansion.expand()\u003c/code\u003e - directly or transitively via \u003ccode\u003eminimatch\u003c/code\u003e / \u003ccode\u003eglob\u003c/code\u003e brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a \u003ccode\u003emaxLength\u003c/code\u003e option (default 4,000,000) that bounds accumulated output and intermediate arrays.\u003c/p\u003e"
            }
          ],
          "value": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input (\u0027{a,b}\u0027.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-469",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-469 HTTP DoS"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T12:54:23.124Z",
        "orgId": "22e2d327-25fe-45d7-9f0c-dcd23b7108df",
        "shortName": "seal"
      },
      "references": [
        {
          "name": "GHSA-mh99-v99m-4gvg",
          "url": "https://www.npmjs.com/package/brace-expansion"
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "22e2d327-25fe-45d7-9f0c-dcd23b7108df",
    "assignerShortName": "seal",
    "cveId": "CVE-2026-14257",
    "datePublished": "2026-07-23T12:54:23.124Z",
    "dateReserved": "2026-06-30T15:45:06.757Z",
    "dateUpdated": "2026-07-23T14:44:41.856Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-15307 (GCVE-0-2026-15307)

Vulnerability from cvelistv5 – Published: 2026-08-04 15:48 – Updated: 2026-08-05 03:57

Title

Server-side file-write and request forgery via spatial lookups

Summary

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the `django.contrib.gis.gdal.GDALRaster` constructor. Any value used in a spatial lookup against a `GeometryField` or `RasterField` reaches this constructor, including untrusted input, for example a spatial-field filter submitted through the Django admin changelist query string by a staff user with view permission. A `dict`, or a `str` holding its JSON representation, is opened in write mode regardless of the constructor's `write=False` default, allowing a file with an attacker-chosen name and contents to be written through a file-backed GDAL driver. Any other `str` is treated as a datasource, allowing an outbound network request through a GDAL virtual filesystem handler. Writing a file to a location later imported by the application can result in remote code execution. Earlier, unsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluated and may also be affected. Django would like to thank Bence Nagy, localhost-detect, and kimchunbok_ for reporting this issue.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-04 00:00 UTC

CWE

CWE-73 - External Control of File Name or Path
CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

DSF mitre root

References

7 references

URL	Tags
https://docs.djangoproject.com/en/dev/releases/se…	vendor-advisory
https://groups.google.com/g/django-announce	mailing-list
https://github.com/django/django/commit/f1949c1f9…	patch
https://github.com/django/django/commit/39b3e2d0c…	patch
https://github.com/django/django/commit/208f80cb6…	patch
https://github.com/django/django/commit/115ffd046…	patch
https://www.djangoproject.com/weblog/2026/aug/04/…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
djangoproject	Django	Affected: 6.0 , < 6.0.8 (python) Unaffected: 6.0.8 (python) Affected: 5.2 , < 5.2.17 (python) Unaffected: 5.2.17 (python)

Date Public

2026-08-04 10:00

Credits

Bence Nagy, localhost-detect, and kimchunbok_ Jacob Walls Natalia Bidart

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15307",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-04T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-05T03:57:15.862Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pypi.org/project/Django/",
          "defaultStatus": "unaffected",
          "packageName": "django",
          "product": "Django",
          "repo": "https://github.com/django/django/",
          "vendor": "djangoproject",
          "versions": [
            {
              "lessThan": "6.0.8",
              "status": "affected",
              "version": "6.0",
              "versionType": "python"
            },
            {
              "status": "unaffected",
              "version": "6.0.8",
              "versionType": "python"
            },
            {
              "lessThan": "5.2.17",
              "status": "affected",
              "version": "5.2",
              "versionType": "python"
            },
            {
              "status": "unaffected",
              "version": "5.2.17",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Bence Nagy, localhost-detect, and kimchunbok_"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Jacob Walls"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Natalia Bidart"
        }
      ],
      "datePublic": "2026-08-04T10:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\u003c/p\u003e\u003cp\u003eGeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the \u003ccode\u003edjango.contrib.gis.gdal.GDALRaster\u003c/code\u003e constructor. Any value used in a spatial lookup against a \u003ccode\u003eGeometryField\u003c/code\u003e or \u003ccode\u003eRasterField\u003c/code\u003e reaches this constructor, including untrusted input, for example a spatial-field filter submitted through the Django admin changelist query string by a staff user with view permission. A \u003ccode\u003edict\u003c/code\u003e, or a \u003ccode\u003estr\u003c/code\u003e holding its JSON representation, is opened in write mode regardless of the constructor\u0026#x27;s \u003ccode\u003ewrite=False\u003c/code\u003e default, allowing a file with an attacker-chosen name and contents to be written through a file-backed GDAL driver. Any other \u003ccode\u003estr\u003c/code\u003e is treated as a datasource, allowing an outbound network request through a GDAL virtual filesystem handler. Writing a file to a location later imported by the application can result in remote code execution.\u003c/p\u003e\u003cp\u003eEarlier, unsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluated and may also be affected.\u003c/p\u003e\u003cp\u003eDjango would like to thank Bence Nagy, localhost-detect, and kimchunbok_ for reporting this issue.\u003c/p\u003e"
            }
          ],
          "value": "An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\nGeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the `django.contrib.gis.gdal.GDALRaster` constructor. Any value used in a spatial lookup against a `GeometryField` or `RasterField` reaches this constructor, including untrusted input, for example a spatial-field filter submitted through the Django admin changelist query string by a staff user with view permission. A `dict`, or a `str` holding its JSON representation, is opened in write mode regardless of the constructor\u0027s `write=False` default, allowing a file with an attacker-chosen name and contents to be written through a file-backed GDAL driver. Any other `str` is treated as a datasource, allowing an outbound network request through a GDAL virtual filesystem handler. Writing a file to a location later imported by the application can result in remote code execution.\nEarlier, unsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluated and may also be affected.\nDjango would like to thank Bence Nagy, localhost-detect, and kimchunbok_ for reporting this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-664",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-664: Server Side Request Forgery"
            }
          ]
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://docs.djangoproject.com/en/dev/internals/security/#security-issue-severity-levels",
              "value": "high"
            },
            "type": "Django severity rating"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "CWE-73: External Control of File Name or Path",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-04T15:48:18.829Z",
        "orgId": "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
        "shortName": "DSF"
      },
      "references": [
        {
          "name": "Django security archive",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://docs.djangoproject.com/en/dev/releases/security/"
        },
        {
          "name": "Django releases announcements",
          "tags": [
            "mailing-list"
          ],
          "url": "https://groups.google.com/g/django-announce"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/django/django/commit/f1949c1f9758947ade984c895ff16bef46f56520"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/django/django/commit/39b3e2d0c743a338def6c473086ebc06865e86b6"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/django/django/commit/208f80cb682868b584ed0a78f23e4ba6304212aa"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/django/django/commit/115ffd0463a765ab1cc93de18e94b5459b8a300e"
        },
        {
          "name": "Django security releases issued: 6.0.8 and 5.2.17",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.djangoproject.com/weblog/2026/aug/04/security-releases/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-06T00:00:00.000Z",
          "value": "Initial report received."
        },
        {
          "lang": "en",
          "time": "2026-07-20T00:00:00.000Z",
          "value": "Vulnerability confirmed."
        },
        {
          "lang": "en",
          "time": "2026-08-04T10:00:00.000Z",
          "value": "Security release issued."
        }
      ],
      "title": "Server-side file-write and request forgery via spatial lookups",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6a34fbeb-21d4-45e7-8e0a-62b95bc12c92",
    "assignerShortName": "DSF",
    "cveId": "CVE-2026-15307",
    "datePublished": "2026-08-04T15:48:18.829Z",
    "dateReserved": "2026-07-09T16:50:57.960Z",
    "dateUpdated": "2026-08-05T03:57:15.862Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33818 (GCVE-0-2026-33818)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-09-17 17:35

Title

Enforce maximum recursion depth in encoding/asn1

Summary

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:11 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80405
https://groups.google.com/g/golang-announce/c/94p…
https://go.dev/cl/814980
https://pkg.go.dev/vuln/GO-2026-5972

Impacted products

1 product

Vendor	Product	Version
Go standard library	encoding/asn1	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Marwan Atia (marwansamir688@gmail.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33818",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:11:19.904646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:12:34.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "encoding/asn1",
          "product": "encoding/asn1",
          "programRoutines": [
            {
              "name": "parseSequenceOf"
            },
            {
              "name": "parseField"
            },
            {
              "name": "UnmarshalWithParams"
            },
            {
              "name": "Unmarshal"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Marwan Atia (marwansamir688@gmail.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-17T17:35:10.847Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80405"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://go.dev/cl/814980"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "title": "Enforce maximum recursion depth in encoding/asn1"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-33818",
    "datePublished": "2026-08-13T21:58:52.821Z",
    "dateReserved": "2026-03-23T20:35:32.815Z",
    "dateUpdated": "2026-09-17T17:35:10.847Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42215 (GCVE-0-2026-42215)

Vulnerability from cvelistv5 – Published: 2026-05-07 18:17 – Updated: 2026-05-09 03:56

Title

GitPython: Command injection via Git options bypass

Summary

GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --upload-pack and --receive-pack by default, but the equivalent Python kwargs upload_pack and receive_pack bypass that check. If an application passes attacker-controlled kwargs into Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(), this leads to arbitrary command execution even when allow_unsafe_options is left at its default value of False. This issue has been patched in version 3.1.47.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-08 00:00 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/gitpython-developers/GitPython…	x_refsource_CONFIRM
https://github.com/gitpython-developers/GitPython…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
gitpython-developers	GitPython	Affected: >= 3.1.30, < 3.1.47

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42215",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-09T03:56:00.861Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GitPython",
          "vendor": "gitpython-developers",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.1.30, \u003c 3.1.47"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --upload-pack and --receive-pack by default, but the equivalent Python kwargs upload_pack and receive_pack bypass that check. If an application passes attacker-controlled kwargs into Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(), this leads to arbitrary command execution even when allow_unsafe_options is left at its default value of False. This issue has been patched in version 3.1.47."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T18:17:03.194Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4"
        },
        {
          "name": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"
        }
      ],
      "source": {
        "advisory": "GHSA-rpm5-65cw-6hj4",
        "discovery": "UNKNOWN"
      },
      "title": "GitPython: Command injection via Git options bypass"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42215",
    "datePublished": "2026-05-07T18:17:03.194Z",
    "dateReserved": "2026-04-25T05:04:37.028Z",
    "dateUpdated": "2026-05-09T03:56:00.861Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42284 (GCVE-0-2026-42284)

Vulnerability from cvelistv5 – Published: 2026-05-07 18:19 – Updated: 2026-05-09 03:56

Title

GitPython: Unsafe option check validates multi_options before shlex.split transforms it

Summary

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options)). A string like "--branch main --config core.hooksPath=/x" passes validation (starts with --branch), but after split becomes ["--branch", "main", "--config", "core.hooksPath=/x"]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-08 00:00 UTC

CWE

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/gitpython-developers/GitPython…	x_refsource_CONFIRM
https://github.com/gitpython-developers/GitPython…	x_refsource_MISC
https://www.tenable.com/cve/CVE-2026-32686	exploit

Impacted products

1 product

Vendor	Product	Version
gitpython-developers	GitPython	Affected: < 3.1.47

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42284",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-09T03:56:02.927Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://www.tenable.com/cve/CVE-2026-32686"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GitPython",
          "vendor": "gitpython-developers",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.1.47"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(\" \".join(multi_options)). A string like \"--branch main --config core.hooksPath=/x\" passes validation (starts with --branch), but after split becomes [\"--branch\", \"main\", \"--config\", \"core.hooksPath=/x\"]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-88",
              "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T18:19:20.129Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485"
        },
        {
          "name": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"
        }
      ],
      "source": {
        "advisory": "GHSA-x2qx-6953-8485",
        "discovery": "UNKNOWN"
      },
      "title": "GitPython: Unsafe option check validates multi_options before shlex.split transforms it"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-42284",
    "datePublished": "2026-05-07T18:19:20.129Z",
    "dateReserved": "2026-04-26T12:13:55.551Z",
    "dateUpdated": "2026-05-09T03:56:02.927Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42504 (GCVE-0-2026-42504)

Vulnerability from cvelistv5 – Published: 2026-06-02 22:01 – Updated: 2026-09-17 17:35

Title

Quadratic complexity in WordDecoder.DecodeHeader in mime

Summary

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-03 14:05 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79217
https://go.dev/cl/774481
https://groups.google.com/g/golang-announce/c/tKs…
https://pkg.go.dev/vuln/GO-2026-5038

Impacted products

1 product

Vendor	Product	Version
Go standard library	mime	Affected: 0 , < 1.25.11 (semver) Affected: 1.26.0-0 , < 1.26.4 (semver)

Credits

p4p3r (https://hackerone.com/p4p3r_hak)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-42504",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-03T14:05:39.682615Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-407",
                "description": "CWE-407 Inefficient Algorithmic Complexity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-03T14:06:13.623Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "mime",
          "product": "mime",
          "programRoutines": [
            {
              "name": "WordDecoder.DecodeHeader"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.11",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.4",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "p4p3r (https://hackerone.com/p4p3r_hak)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-17T17:35:09.431Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79217"
        },
        {
          "url": "https://go.dev/cl/774481"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "title": "Quadratic complexity in WordDecoder.DecodeHeader in mime"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-42504",
    "datePublished": "2026-06-02T22:01:37.219Z",
    "dateReserved": "2026-04-28T00:21:12.792Z",
    "dateUpdated": "2026-09-17T17:35:09.431Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44244 (GCVE-0-2026-44244)

Vulnerability from cvelistv5 – Published: 2026-05-07 18:22 – Updated: 2026-05-09 03:56

Title

GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath

Summary

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's configparser without validating for newlines. GitPython's own _write() converts embedded newlines into indented continuation lines (e.g. \n becomes \n\t), but Git still accepts an indented [core] stanza as a section header — so the injected core.hooksPath becomes effective configuration. Any Git operation that invokes hooks (commit, merge, checkout) will then execute scripts from the attacker-controlled path. This issue has been patched in version 3.1.49.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-08 00:00 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/gitpython-developers/GitPython…	x_refsource_CONFIRM
https://github.com/gitpython-developers/GitPython…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
gitpython-developers	GitPython	Affected: < 3.1.49

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44244",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-09T03:56:04.115Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GitPython",
          "vendor": "gitpython-developers",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.1.49"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python\u0027s configparser without validating for newlines. GitPython\u0027s own _write() converts embedded newlines into indented continuation lines (e.g. \\n becomes \\n\\t), but Git still accepts an indented [core] stanza as a section header \u2014 so the injected core.hooksPath becomes effective configuration. Any Git operation that invokes hooks (commit, merge, checkout) will then execute scripts from the attacker-controlled path. This issue has been patched in version 3.1.49."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-07T18:22:39.704Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67"
        },
        {
          "name": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49"
        }
      ],
      "source": {
        "advisory": "GHSA-v87r-6q3f-2j67",
        "discovery": "UNKNOWN"
      },
      "title": "GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44244",
    "datePublished": "2026-05-07T18:22:39.704Z",
    "dateReserved": "2026-05-05T16:33:55.844Z",
    "dateUpdated": "2026-05-09T03:56:04.115Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:71179

CVE-2025-57847 (GCVE-0-2025-57847)

CVE-2025-66418 (GCVE-0-2025-66418)

CVE-2026-12564 (GCVE-0-2026-12564)

CVE-2026-14257 (GCVE-0-2026-14257)

CVE-2026-15307 (GCVE-0-2026-15307)

CVE-2026-33818 (GCVE-0-2026-33818)

CVE-2026-42215 (GCVE-0-2026-42215)

CVE-2026-42284 (GCVE-0-2026-42284)

CVE-2026-42504 (GCVE-0-2026-42504)

CVE-2026-44244 (GCVE-0-2026-44244)

Tags

Sightings

Nomenclature

Related by attack behaviour