Product by Red Hat
Red Hat Ansible Automation Platform 2.5
7 known vulnerabilities in Red Hat Ansible Automation Platform 2.5 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-11807 | Eda-server: websocket missing authorization allows credential theft via activation_id spoofing | 9.6 | |
| High | CVE-2026-11332 | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution | 7.8 | |
| High | CVE-2025-14025 | Red Hat Ansible Automation Platform: Incorrect Execution-Assigned Permissions | 8.5 | |
| Medium | CVE-2025-9908 | Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams | 6.7 | |
| Medium | CVE-2025-9909 | Aap-gateway: improper path validation in gateway allows credential exfiltration | 6.7 | |
| Medium | CVE-2025-9907 | Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda | 6.7 | |
| Medium | CVE-2025-57847 | Red Hat Ansible Automation Platform: Incorrect Default Permissions | 6.4 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,