Red Hat Security Advisory

RHSA-2026:0408

Red Hat Ansible Automation Platform 2.6 Container Release Update

Released 2026-01-08 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/gateway-rhel9, registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9

Fixes 2 records

TI-2025-42157 CVE-2025-68664 · GHSA-c67j-w6g6-q2cm

LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

HIGH 79

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.4293 Published 2025-12-23 Fixed in 1.2.5, 0.3.81 CWE-502

TI-2025-12815 CVE-2025-14025 · GHSA-3j6w-p6vm-g8hg

Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions

LOW 39

A flaw was found in Ansible Automation Platform (AAP).

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00423 Published 2026-01-08 Fixed in 2.5.20260106-1.el8ap, 2.5.20260106-1.el9ap +3 CWE-279