RH
Product
Red Hat Ansible Automation Platform 2.7
On CISA KEVExploited in the wild
66
CVEs
1
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 11High 33Medium 19Low 3
Watch
Add Red Hat Ansible Automation Platform 2.7 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-27145 | 6.5 | Jun 2 | Inefficient candidate hostname parsing in crypto/x509 Affected: All versions, or not specified |
| CVE-2026-84721 | 6.4 | Sep 23 | Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil) Affected: All versions, or not specified |
| CVE-2026-84470 | 6.4 | Sep 1 | Automation-controller: automation-controller-container: automation-controller/awx: bulk job launch checks instance_groups at read level instead of use level, allowing execution-placement authorization bypass Affected: All versions, or not specified |
| CVE-2025-57847 | 6.4 | Apr 8 | Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions Affected: All versions, or not specified |
| CVE-2026-84717 | 5.3 | Sep 23 | Automation-controller: automation-controller: unauthenticated 200-vs-403 oracle in bitbucket data center webhook receiver enumerates webhook-enabled job templates Affected: All versions, or not specified |
| CVE-2026-84712 | 5.3 | Sep 23 | Automation-controller: automation-controller: unauthenticated /api/v2/ping/ discloses automation-mesh instance topology and instance-group membership Affected: All versions, or not specified |
| CVE-2026-44188 | 5.3 | Jun 15 | Ansible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expiration Affected: All versions, or not specified |
| CVE-2026-71459 | 5.0 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: jobjobeventschildrensummary rbac bypass exposes cross-tenant job event tree structure Affected: All versions, or not specified |
| CVE-2026-71458 | 5.0 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: named-url 404 body oracle enables cross-tenant resource name enumeration Affected: All versions, or not specified |
| CVE-2026-84718 | 4.3 | Sep 23 | Automation-controller: automation-controller: client ip spoofing in audit/access logs via unrestricted x-forwarded-for trust Affected: All versions, or not specified |
| CVE-2026-71461 | 4.3 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: verbose internal exception disclosure via hostlist bare-exception handler Affected: All versions, or not specified |
| CVE-2026-71460 | 4.3 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: any authenticated user reads red hat subscription/license details via /config/ Affected: All versions, or not specified |
| CVE-2026-71462 | 4.1 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: custom_venv_path setting provides filesystem path-existence oracle on control pod Affected: All versions, or not specified |
| CVE-2026-71465 | 3.1 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: ad-hoc command limit field allows cli argument injection into ansible executable Affected: All versions, or not specified |
| CVE-2026-71464 | 3.1 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: schedule and workflowjobtemplatenode scm_branch prompt bypasses leading-dash git-argument guard Affected: All versions, or not specified |
| CVE-2026-71463 | 2.7 | Sep 23 | Automation-controller: automation-controller-container: automation-controller: notification template jinja whitelist bypass via conditional gating leaks tracebacks Affected: All versions, or not specified |