Red Hat Security AdvisoryRHSA-2026:28376
Red Hat Ansible Automation Platform 2.5 Product Security Update
Released 2026-06-23 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-eda-controller-1.1.19-1.el8ap, automation-eda-controller-base-1.1.19-1.el8ap, automation-eda-controller-base-services-1.1.19-1.el8ap +2
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-eda-controller-1.1.19-1.el9ap, automation-eda-controller-base-1.1.19-1.el9ap, automation-eda-controller-base-services-1.1.19-1.el9ap +2
Fixes 1 record
Priority MEDIUM 42
A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API.
CVSS 3.1CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00531 · Published 2026-06-23 · Fixed in 1.1.19-1.el8ap, 1.1.19-1.el9ap +4 CWE-862
