Red Hat Security Advisory

RHSA-2026:28377

Red Hat Ansible Automation Platform 2.6 Product Security Update

Released 2026-06-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-eda-controller-1.2.9-2.el9ap, automation-eda-controller-base-1.2.9-2.el9ap, automation-eda-controller-base-services-1.2.9-2.el9ap +2

TI-2026-10191 CVE-2026-11807 · GHSA-3w6r-r33r-cfg6

MEDIUM 42

A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00531 Published 2026-06-23 Fixed in 1.1.19-1.el8ap, 1.1.19-1.el9ap +4 CWE-862