What’s Vulnerable › Vulnerabilities

CVE-2025-5988: Aap-gateway: csrf origin checking is disabled

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-04 · updated 2026-06-17
• Weakness: CWE-352

Description

A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin checking is not done on requests from the gateway to external components, such as the controller, hub, and eda.

Affected products

• Red Hat Ansible Automation Platform 2.5 for RHEL 8: all versions — fixed in 0:2.5.20250730-2.el8ap
• Red Hat Ansible Automation Platform 2.5 for RHEL 9: all versions — fixed in 0:2.5.20250730-2.el9ap

How to fix

Upgrade to a fixed version: Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:2.5.20250730-2.el8ap; Red Hat Ansible Automation Platform 2.5 for RHEL 9 0:2.5.20250730-2.el9ap. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/errata/RHSA-2025:12772
• https://access.redhat.com/security/cve/CVE-2025-5988
• https://bugzilla.redhat.com/show_bug.cgi?id=2371644

Get alerted when CVE-2025-5988 or the next vulnerability affects your stack