What’s Vulnerable › Products

Red Hat Ansible Automation Platform 2.7 vulnerabilities

43 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 43 published in the last 12 months.

Check whether your Red Hat Ansible Automation Platform 2.7 version is affected

Latest Red Hat Ansible Automation Platform 2.7 vulnerabilities

• CVE-2026-92982 — Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection (CVSS 8.5)
• CVE-2026-90959 — Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft (CVSS 8.1)
• CVE-2026-94416 — Aap-gateway: aap-gateway: authorization bypass via workload identity token forgery (CVSS 6.8)
• CVE-2026-85475 — Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component (CVSS 7.2)
• CVE-2026-84724 — Automation-controller: automation-controller: systemjob extra_vars.days argument injection into uncontainerized control-plane awx-manage process (CVSS 6.6)
• CVE-2026-84721 — Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil) (CVSS 6.4)
• CVE-2026-84720 — Automation-controller: automation-controller: workflowjobnode.ancestor_artifacts lacks prevent_search, exposing no_log set_stats artifacts via orm-traversal count-oracle (CVSS 6.5)
• CVE-2026-84719 — Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane) (CVSS 9.9)
• CVE-2026-84718 — Automation-controller: automation-controller: client ip spoofing in audit/access logs via unrestricted x-forwarded-for trust (CVSS 4.3)
• CVE-2026-84717 — Automation-controller: automation-controller: unauthenticated 200-vs-403 oracle in bitbucket data center webhook receiver enumerates webhook-enabled job templates (CVSS 5.3)
• CVE-2026-84716 — Automation-controller: automation-controller: instance install_bundle issues 10-year, non-revocable receptor mesh-ca certificates for caller-chosen (and case-variant impersonating) hostnames (CVSS 6.6)
• CVE-2026-84714 — Automation-controller: automation-controller: incomplete sanitize_jinja() regex allows jinja template injection into ad-hoc module_args, machine-credential fields, and host names, reaching ansible-core templating in the execution environment (CVSS 7.1)
• CVE-2026-84713 — Automation-controller: automation-controller: notification.recipients/subject/error lack prevent_search, allowing zero-privilege cross-tenant recovery of notification recipient secrets via filter oracle (CVSS 6.5)
• CVE-2026-84712 — Automation-controller: automation-controller: unauthenticated /api/v2/ping/ discloses automation-mesh instance topology and instance-group membership (CVSS 5.3)
• CVE-2026-84706 — Automation-controller: automation-controller-container: automation-controller: credential type env-injector deny-list omits process-hijacking variables (bash_env/ld_preload) allowing code execution in the execution environment (CVSS 7.6)
• CVE-2026-84691 — Automation-controller: automation-controller-container: automation-controller: format string injection in the api 4xx error log setting discloses django secret_key and database credentials to an administrator (CVSS 8.7)
• CVE-2026-84683 — Automation-controller: automation-controller-container: automation-controller: stored cross-site scripting in the job stdout html view via ansi osc 8 hyperlink sequences (javascript: anchor) enabling session takeover (CVSS 8.7)
• CVE-2026-75884 — Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groups (CVSS 9.1)
• CVE-2026-84502 — Automation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote --upload-pack` yields rce on the controller-task control-plane pod (CVSS 9.9)
• CVE-2026-84499 — Automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via schedule/workflowjobtemplatenode survey min/max validation error message (CVSS 7.7)
• CVE-2026-84486 — Automation-controller: automation-controller-container: automation-controller: unauthenticated debug scheduler-trigger endpoints (allowany, routed without debug guard) allow advisory-lock starvation of job dispatch (dos) (CVSS 8.2)
• CVE-2026-84474 — Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioning-callback host match (CVSS 9.9)
• CVE-2026-76648 — Automation-controller: automation-controller-container: aap controller: copyapiview.post() missing read authorization check enables job template secret recovery (CVSS 8.5)
• CVE-2026-71465 — Automation-controller: automation-controller-container: automation-controller: ad-hoc command limit field allows cli argument injection into ansible executable (CVSS 3.1)
• CVE-2026-71464 — Automation-controller: automation-controller-container: automation-controller: schedule and workflowjobtemplatenode scm_branch prompt bypasses leading-dash git-argument guard (CVSS 3.1)