Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Red Hat Ansible Automation Platform 2.5 for RHEL 8 — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Red Hat Ansible Automation Platform 2.5 for RHEL 8, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE IDTitleCVSSSeverityPublished
CVE-2026-6266 Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking CWE-305 8.3 High2026-05-04
CVE-2025-9909 Aap-gateway: improper path validation in gateway allows credential exfiltration CWE-647 6.7 Medium2026-02-27
CVE-2025-9908 Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams CWE-200 6.7 Medium2026-02-27
CVE-2025-9907 Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda CWE-200 6.7 Medium2026-02-27
CVE-2025-14025 Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions CWE-279 8.5 High2026-01-08
CVE-2025-49520 Event-driven-ansible: authenticated argument injection in git url in eda project creation CWE-88 8.8 High2025-06-30
CVE-2025-49521 Event-driven-ansible: template injection via git branch and refspec in eda projects CWE-94 8.8 High2025-06-30

All 7 known CVE vulnerabilities affecting Red Hat Ansible Automation Platform 2.5 for RHEL 8 with full Chinese analysis, references, and POCs where available.