What’s Vulnerable › Products

Red Hat Ansible Automation Platform 2 vulnerabilities

38 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 36 published in the last 12 months.

Check whether your Red Hat Ansible Automation Platform 2 version is affected

Latest Red Hat Ansible Automation Platform 2 vulnerabilities

CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
CVE-2026-109131 — Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl) (CVSS 5.4)
CVE-2026-92982 — Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection (CVSS 8.5)
CVE-2026-89091 — Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution (CVSS 8.8)
CVE-2026-103869 — Pulp-ansible: bearer tokens are reused across remotes in a worker (CVSS 6.5)
CVE-2026-103868 — Pulp-container: registry credentials are reused across remotes in a worker (CVSS 6.5)
CVE-2026-106033 — Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter (CVSS 5.4)
CVE-2026-103754 — Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory (CVSS 5.9)
CVE-2026-90959 — Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft (CVSS 8.1)
CVE-2026-94416 — Aap-gateway: aap-gateway: authorization bypass via workload identity token forgery (CVSS 6.8)
CVE-2026-85475 — Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component (CVSS 7.2)
CVE-2026-84721 — Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil) (CVSS 6.4)
CVE-2026-84713 — Automation-controller: automation-controller: notification.recipients/subject/error lack prevent_search, allowing zero-privilege cross-tenant recovery of notification recipient secrets via filter oracle (CVSS 6.5)
CVE-2026-76648 — Automation-controller: automation-controller-container: aap controller: copyapiview.post() missing read authorization check enables job template secret recovery (CVSS 8.5)
CVE-2026-71461 — Automation-controller: automation-controller-container: automation-controller: verbose internal exception disclosure via hostlist bare-exception handler (CVSS 4.3)
CVE-2026-42784 — Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion (CVSS 7.4)
CVE-2026-92091 — Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array (CVSS 5.9)
CVE-2026-79699 — Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory (CVSS 4.4)
CVE-2026-79705 — Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers (CVSS 4.5)
CVE-2026-84185 — Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification (CVSS 5.9)
CVE-2026-80179 — Jwcrypto: jwcrypto: denial of service via malformed jwe tokens (CVSS 5.9)
CVE-2026-79717 — Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_url with no private-address restriction (CVSS 6.4)
CVE-2026-44191 — Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings (CVSS 7.8)
CVE-2026-44192 — Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal (CVSS 6.6)
CVE-2026-44190 — Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execution via command injection in activation script setting (CVSS 7.8)