Red Hat Security Advisory

RHSA-2026:0361

Red Hat Ansible Automation Platform 2.5 Product Security Update

Released 2026-01-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-gateway-server-2.5.20260106-1.el8ap
Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-gateway-server-2.5.20260106-1.el9ap

Fixes 1 record

TI-2025-12815 CVE-2025-14025 · GHSA-3j6w-p6vm-g8hg

Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions

LOW 39

A flaw was found in Ansible Automation Platform (AAP).

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00423 Published 2026-01-08 Fixed in 2.5.20260106-1.el8ap, 2.5.20260106-1.el9ap +3 CWE-279