Red Hat Ansible Automation Platform (automation-controller): Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen und einen Denial-of-Service-Zustand herbeizuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-355561 linked CVEs
Open advisory with all CVEs
More on automation-controller
Other advisories
- HighCVE-2026-76221Red Hat Ansible Automation Platform (automation-controller): Mehrere Schwachstellen
- Not ratedosv:CLEANSTART-2026-GY60035Security fix for GHSA-qpw4-5x99-6vjp applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2
- Not ratedosv:CLEANSTART-2026-QL47150Security fix for GHSA-9m57-25v3-79x9 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2
- Not ratedosv:CLEANSTART-2026-IH80473Security fix for GHSA-45gg-vh54-h5m9 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2
- Not ratedosv:CLEANSTART-2026-OC21392Security fix for GHSA-78mq-xcr3-xm33 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2
- Not ratedosv:CLEANSTART-2026-CM19528Security fix for GHSA-q4h4-gmj2-qvw2 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2
- Not ratedosv:CLEANSTART-2026-OK40538Security fix for GHSA-w879-237q-wc7r applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2
- Not ratedosv:CLEANSTART-2026-MJ05822Security fix for GHSA-jppx-rxg9-jmrx applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3555
ID