RHSA-2026:42078

Advisory lineage Upstream: 24 Downstream: 0
Published: 23 Jul 2026, 10:13
Last modified:19 Sept 2026, 10:10

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9 CRITICAL
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 Jul 2026, 10:13
Published
Vulnerability first disclosed
19 Sept 2026, 10:10
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

CVSS Metrics

  • v3.1•CRITICAL•Score: 9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

Affected Systems

  • redhat•ansible-core

    < 1:2.16.19-1.el8ap | < 1:2.16.19-1.el9ap

  • redhat•automation-controller-venv-tower

    < 0:4.6.30-2.el8ap | < 0:4.6.30-2.el9ap

  • redhat•automation-gateway-server

    < 0:2.5.20260715-1.el8ap | < 0:2.5.20260715-1.el9ap

  • redhat•python3.12-gitpython

    < 0:3.1.50-1.el8ap | < 0:3.1.50-1.el9ap

  • redhat•python3.12-pulpcore

    < 0:3.49.63-2.el8ap | < 0:3.49.63-2.el9ap

  • redhat•receptor

    < 0:1.6.6-1.el8ap | < 0:1.6.6-1.el9ap

  • redhat•receptor-debuginfo

    < 0:1.6.6-1.el8ap | < 0:1.6.6-1.el9ap

  • redhat•receptor-debugsource

    < 0:1.6.6-1.el8ap | < 0:1.6.6-1.el9ap

  • redhat•receptorctl

    < 0:1.6.6-1.el8ap | < 0:1.6.6-1.el9ap

References (140)