CVE-2025-9908: redhat ansible_automation_platform

Vulnerability summary

CVE-2025-9908 is a medium (CVSS 6.7) vulnerability in redhat ansible_automation_platform. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.1% of scored vulnerabilities.

Timeline

1. 27-02-2026
   PublishedVulnerability first disclosed.
2. 03-03-2026
   Last modifiedVulnerability information updated.

Description

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers (such as X-Trusted-Proxy and X-Envoy-*) and event stream URLs via crafted requests and job templates. By exfiltrating these headers, an attacker could spoof trusted requests, escalate privileges, or perform malicious event injection.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.