Red Hat Ansible Automation Platform 2/ansible-automation-platform-25/controller-rhel8-operator

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-29
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review.	google.golang.org/grpc Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Critical	Fix reported	2026-09-10
ansible-core: Argument injection in ansible-galaxy role install leads to arbitrary code executionCVE-2026-11332 · GHSA-W8P5-MX5W-CPQJVersion ranges need review.	ansible-core Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel9-operator	PyPIRed Hat	High	Fix reported	2026-07-23
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17
ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of CVE-2024-9902)CVE-2026-123037	Migration Toolkit for Applications 8/mta/mta-rhel9-operator Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded
ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissionsCVE-2025-57847	Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/ee-29-rhel8	Red Hat	Medium	No fix reported	Not recorded