Red hat ansible automation platform 2.5
This hub aggregates every CVE we track for Red hat ansible automation platform 2.5, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.
6
CVEs tracked
1
Critical
1
High
0
In CISA KEV
Severity distribution
MEDIUM4HIGH1CRITICAL1
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
3
0
1
0
1
0
2024-082026-07
Latest CVEs
The 6 most recently published vulnerabilities affecting Red hat ansible automation platform 2.5.
- CVE-2026-11807Eda-server: websocket missing authorization allows credential theft via activation_id spoofing9.6
- CVE-2025-57847Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions6.4
- CVE-2025-9909Aap-gateway: improper path validation in gateway allows credential exfiltration6.7
- CVE-2025-9908Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams6.7
- CVE-2025-9907Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda6.7
- CVE-2025-14025Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions8.5
Product normalization is registry-driven with AI assist and human review. How it works