RHSA-2026:13512

Advisory lineage Upstream: 12 Downstream: 0
Published: 05 May 2026, 10:11
Last modified:18 Sept 2026, 10:05

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.1 CRITICAL
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 May 2026, 10:11
Published
Vulnerability first disclosed
18 Sept 2026, 10:05
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Systems

  • redhat•automation-controller-venv-tower

    < 0:4.6.28-3.el8ap | < 0:4.6.28-3.el9ap

  • redhat•automation-gateway-proxy

    < 0:2.5.10-5.el8ap | < 0:2.6.14-2.el9

  • redhat•automation-gateway-proxy-debugsource

    < 0:2.5.10-5.el8ap | < 0:2.6.14-2.el9

  • redhat•automation-gateway-proxy-server

    < 0:2.5.10-5.el8ap | < 0:2.6.14-2.el9

  • redhat•automation-gateway-proxy-server-debuginfo

    < 0:2.5.10-5.el8ap | < 0:2.6.14-2.el9

  • redhat•automation-gateway-server

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+activitystream

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+api_documentation

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+authentication

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+channel_auth

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+feature_flags

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+jwt_consumer

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+oauth2_provider

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+rbac

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+redis_client

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-django-ansible-base+rest_filters

    < 0:2.5.20260422-2.el8ap | < 0:2.5.20260422-2.el9ap

  • redhat•python3.12-jwcrypto

    < 0:1.5.7-1.el8ap | < 0:1.5.7-1.el9ap

  • redhat•python3.12-markdown

    < 0:3.10.2-1.el8ap | < 0:3.10.2-1.el9ap

  • redhat•python3.12-pyasn1

    < 0:0.6.3-1.el8ap | < 0:0.6.3-1.el9ap

  • redhat•python3.12-pyjwt

    < 0:2.12.1-1.el8ap | < 0:2.12.1-1.el9ap

  • redhat•python3.12-pyjwt+crypto

    < 0:2.12.1-1.el8ap | < 0:2.12.1-1.el9ap

  • redhat•python3.12-pyOpenSSL

    < 0:26.0.0-1.el8ap | < 0:26.0.0-1.el9ap

  • redhat•receptor

    < 0:1.6.4-2.el8ap | < 0:1.6.4-2.el9ap

References (81)