RHSA-2025:23069: ansible-automation-platform-installer Red Hat

CVSS: 8.3v3.1HighPublished

Published 11-12-2025Last modified 09-10-2026

Open JSON

Vulnerability summary

RHSA-2025:23069 is a high (CVSS 8.3) vulnerability in ansible-automation-platform-installer Red Hat.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.3/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0

CVE-2025-58754 CVE-2025-59530 CVE-2025-64459 CVE-2025-9907 CVE-2025-9908 CVE-2025-9909

Timeline

11-12-2025
PublishedVulnerability first disclosed.
09-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

CVSS metrics

1 score · 1 source · 1 version

v3.18.3

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat60 products

ansible-automation-platform-installer< 0:2.5-20.el8ap | < 0:2.5-20.el9ap
ansible-builder< 0:3.1.1-1.el8ap | < 0:3.1.1-1.el9ap
ansible-creator< 0:25.12.0-1.el8ap | < 0:25.12.0-1.el9ap
ansible-dev-environment< 0:25.12.2-1.1.el8ap | < 0:25.12.2-1.1.el9ap
ansible-dev-tools< 0:25.12.0-1.el8ap | < 0:25.12.0-1.el9ap

ansible-dev-tools+server< 0:25.12.0-1.el8ap | < 0:25.12.0-1.el9ap
ansible-lint< 0:25.12.0-1.el8ap | < 0:25.12.0-1.el9ap
ansible-navigator< 0:25.12.0-1.el8ap | < 0:25.12.0-1.el9ap
ansible-runner< 0:2.4.2-1.el8ap | < 0:2.4.2-1.el9ap
ansible-sign< 0:0.1.4-1.el8ap | < 0:0.1.4-1.el9ap
automation-controller< 0:4.6.23-1.el8ap | < 0:4.6.23-1.el9ap
automation-controller-cli< 0:4.6.23-1.el8ap | < 0:4.6.23-1.el9ap
automation-controller-fapolicyd< 0:1.0-5.el8ap | < 0:1.0-5.el9ap
automation-controller-server< 0:4.6.23-1.el8ap | < 0:4.6.23-1.el9ap
automation-controller-ui< 0:4.6.23-1.el8ap | < 0:4.6.23-1.el9ap
automation-controller-venv-tower< 0:4.6.23-1.el8ap | < 0:4.6.23-1.el9ap
automation-eda-controller< 0:1.1.14-1.el8ap | < 0:1.1.14-1.el9ap
automation-eda-controller-base< 0:1.1.14-1.el8ap | < 0:1.1.14-1.el9ap
automation-eda-controller-base-services< 0:1.1.14-1.el8ap | < 0:1.1.14-1.el9ap
automation-eda-controller-event-stream-services< 0:1.1.14-1.el8ap | < 0:1.1.14-1.el9ap
automation-eda-controller-worker-services< 0:1.1.14-1.el8ap | < 0:1.1.14-1.el9ap
automation-gateway< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
automation-gateway-config< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
automation-gateway-server< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
automation-hub< 0:4.10.10-1.el8ap | < 0:4.10.10-1.el9ap
bindep< 0:2.13.0-1.el8ap | < 0:2.13.0-1.el9ap
molecule< 0:25.12.0-1.el8ap | < 0:25.12.0-1.el9ap
python3.11-ansible-compat< 0:25.12.0-1.el8ap | < 0:25.12.0-1.el9ap
python3.11-ansible-runner< 0:2.4.2-1.el8ap | < 0:2.4.2-1.el9ap
python3.11-distlib< 0:0.4.0-1.el8ap | < 0:0.4.0-1.el9ap
python3.11-django< 0:4.2.26-1.el8ap | < 0:4.2.26-1.el9ap
python3.11-django-ansible-base< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+activitystream< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+api_documentation< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+authentication< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+channel_auth< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+feature_flags< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+jwt_consumer< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+oauth2_provider< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+rbac< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+redis_client< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+rest_filters< 0:2.5.20251210-1.el8ap | < 0:2.5.20251210-1.el9ap
python3.11-execnet< 0:2.1.2-1.el8ap | < 0:2.1.2-1.el9ap
python3.11-galaxy-importer< 0:0.4.36-2.el8ap | < 0:0.4.36-2.el9ap
python3.11-galaxy-ng< 0:4.10.10-1.el8ap | < 0:4.10.10-1.el9ap
python3.11-gunicorn< 0:23.0.0-1.el8ap | < 0:23.0.0-1.el9ap
python3.11-pluggy< 0:1.6.0-1.el8ap | < 0:1.6.0-1.el9ap
python3.11-pytest< 0:9.0.1-1.el8ap | < 0:9.0.1-1.el9ap
python3.11-pytest-ansible< 0:25.12.0-1.el8ap | < 0:25.12.0-1.el9ap
python3.11-pytest-xdist< 0:3.8.0-1.el8ap | < 0:3.8.0-1.el9ap
python3.11-ruamel-yaml-clib< 0:0.2.15-1.el8ap | < 0:0.2.15-1.el9ap
python3.11-ruamel-yaml-clib-debuginfo< 0:0.2.15-1.el8ap | < 0:0.2.15-1.el9ap
python3.11-ruamel-yaml-clib-debugsource< 0:0.2.15-1.el8ap | < 0:0.2.15-1.el9ap
python3.11-subprocess-tee< 0:0.4.2-1.el8ap | < 0:0.4.2-1.el9ap
python3.11-tox-ansible< 0:25.12.0-1.2.el8ap | < 0:25.12.0-1.2.el9ap
python3.11-typing-extensions< 0:4.15.0-1.el8ap | < 0:4.15.0-1.el9ap
receptor< 0:1.6.2-1.el8ap | < 0:1.6.2-1.el9ap
receptor-debuginfo< 0:1.6.2-1.el8ap | < 0:1.6.2-1.el9ap
receptor-debugsource< 0:1.6.2-1.el8ap | < 0:1.6.2-1.el9ap
receptorctl< 0:1.6.2-1.el8ap | < 0:1.6.2-1.el9ap

Show all 60

1 vendor · 60 products

References

38 links

Show all 38 references

www.cve.org/CVERecord?id=CVE-2025-9907Advisory
nvd.nist.gov/vuln/detail/CVE-2025-9907Advisory
access.redhat.com/security/cve/CVE-2025-9908REPORT
www.cve.org/CVERecord?id=CVE-2025-9908Advisory
nvd.nist.gov/vuln/detail/CVE-2025-9908Advisory
access.redhat.com/security/cve/CVE-2025-9909REPORT
www.cve.org/CVERecord?id=CVE-2025-9909Advisory
nvd.nist.gov/vuln/detail/CVE-2025-9909Advisory
access.redhat.com/security/cve/CVE-2025-58754REPORT
www.cve.org/CVERecord?id=CVE-2025-58754Advisory
nvd.nist.gov/vuln/detail/CVE-2025-58754Advisory
github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593ARTICLE
github.com/axios/axios/pull/7011ARTICLE
github.com/axios/axios/releases/tag/v1.12.0ARTICLE
github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwjARTICLE
access.redhat.com/security/cve/CVE-2025-59530REPORT
www.cve.org/CVERecord?id=CVE-2025-59530Advisory
nvd.nist.gov/vuln/detail/CVE-2025-59530Advisory
github.com/quic-go/quic-go/blob/v0.55.0/connection.goARTICLE
github.com/quic-go/quic-go/pull/5354ARTICLE
github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcwARTICLE
access.redhat.com/security/cve/CVE-2025-64459REPORT
www.cve.org/CVERecord?id=CVE-2025-64459Advisory
nvd.nist.gov/vuln/detail/CVE-2025-64459Advisory
docs.djangoproject.com/en/dev/releases/security/ARTICLE
github.com/django/django/commit/c880530ddd4fabd5939bab0e148bebe36699432aARTICLE
groups.google.com/g/django-announceARTICLE
www.djangoproject.com/weblog/2025/nov/05/security-releases/ARTICLE