Red Hat Security Advisory

RHSA-2026:25928

Red Hat Ansible Automation Platform 2.7 Container Release Update

Released 2026-06-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.7 registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9, registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9, registry.redhat.io/ansible-automation-platform-27/hub-rhel9 +3

TI-2026-35886 CVE-2026-48526 · GHSA-xgmm-8j9v-c9wx

HIGH 68

PyJWT is a JSON Web Token implementation in Python.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00427 Published 2026-05-28 Partial fix · 2.13.0 CWE-287

TI-2026-32373 CVE-2026-44432 · GHSA-mf9v-mfxr-j63j

MEDIUM 40

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.0068 Published 2026-05-13 Partial fix · 2.7.0 CWE-409

TI-2026-32372 CVE-2026-44431 · GHSA-qccp-gfcp-xxvc

LOW 36

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00331 Published 2026-05-13 Partial fix · 2.7.0 CWE-200

TI-2026-32167 CVE-2026-44188 · GHSA-r7cm-w9ch-cf3g

LOW 24

A flaw was found in Ansible Lightspeed.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00287 Published 2026-06-15 Partial fix · 1782755166, 1781025813 CWE-613