Redhat Ansible Developer vulnerabilities

• redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 more Aap-gateway: improper path validation in gateway allows credential exfiltration CVE-2025-9909 6.7 MediumNovember 20, 2025
• redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 more Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams CVE-2025-9908 6.7 MediumOctober 29, 2025
• redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 more Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda CVE-2025-9907 6.7 MediumOctober 29, 2025
• red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, redhat ansible automation platform +2 more +4 more Aap-gateway: xss on aap-gateway CVE-2024-10033 6.1 MediumOctober 16, 2024
• redhat ansible, fedoraproject fedora, red hat ansible automation platform 2.4 for rhel 8 +7 more +9 more Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration CVE-2024-0690 Fix available 5.0 MediumFebruary 6, 2024
• redhat ansible automation platform, debian linux, red hat ansible automation platform 1.2 +6 more +8 more Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files CVE-2023-5115 Fix available 6.3 MediumDecember 18, 2023
• redhat ansible, fedoraproject extra packages for enterprise linux, fedora +6 more +8 more Ansible: template injection CVE-2023-5764 Fix available 7.1 HighDecember 12, 2023
• red hat ansible automation platform 2.3 for rhel 8, ansible automation platform 2.3 for rhel 9, ansible automation platform 2.4 for rhel 8 +5 more +7 more Controller: html injection in custom login info CVE-2023-3971 Public exploitFix available 7.3 HighOctober 4, 2023
• redhat ansible automation platform, red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +2 more +4 more Platform: token exposed at importing project CVE-2023-4380 6.3 MediumOctober 4, 2023