RH
Product
Red Hat Ansible Automation Platform 2.4 for RHEL 8
6
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 1Medium 0Low 0
Watch
Add Red Hat Ansible Automation Platform 2.4 for RHEL 8 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-84719 | 9.9 | Sep 23 | Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane) Affected: All versions, or not specified |
| CVE-2026-84502 | 9.9 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote --upload-pack` yields rce on the controller-task control-plane pod Affected: All versions, or not specified |
| CVE-2026-84474 | 9.9 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioning-callback host match Affected: All versions, or not specified |
| CVE-2026-12564 | 9.6 | Aug 18 | Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf Affected: All versions, or not specified |
| CVE-2026-75884 | 9.1 | Sep 23 | Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groups Affected: All versions, or not specified |
| CVE-2024-1394 | 7.5 | Mar 21 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads Affected: All versions, or not specified |
Showing 6
