Red Hat Security Advisory

RHSA-2026:71115

Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Released 2026-09-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-venv-tower-4.5.36-1.el8ap
Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-venv-tower-4.5.36-1.el9ap

TI-2026-58071 CVE-2026-84502 · GHSA-vpmq-jxf9-c55v

MEDIUM 44

A flaw was found in Red Hat Ansible Automation Platform's automation- controller.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0063 Published 2026-09-23 Fixed in 4.5.36-1.el8ap, 4.5.36-1.el9ap +5 CWE-88

TI-2026-58052 CVE-2026-84474 · GHSA-2mcj-95p4-49mv

MEDIUM 44

A flaw was found in Red Hat Ansible Automation Platform's automation- controller.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00801 Published 2026-09-23 Fixed in 4.5.36-1.el8ap, 4.5.36-1.el9ap +5 CWE-807

TI-2026-58239 CVE-2026-84719 · GHSA-9fg4-x49f-5hhc

MEDIUM 43

A flaw was found in the Ansible Automation Platform automation-controller.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00453 Published 2026-09-23 Fixed in 4.5.36-1.el8ap, 4.5.36-1.el9ap +5 CWE-862

TI-2026-10775 CVE-2026-12564 · GHSA-p5f2-j2p5-7p7v

MEDIUM 43

A flaw was found in the AAP Controller's HashiCorp Vault credential plugin.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00348 Published 2026-08-18 Fixed in 4.5.36-1.el8ap, 4.5.36-1.el9ap +5 CWE-918

TI-2026-53120 CVE-2026-75884 · GHSA-fwqq-57j2-8r7g

MEDIUM 41

A flaw was found in AWX.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00409 Published 2026-09-23 Fixed in 4.5.36-1.el8ap, 4.5.36-1.el9ap +5 CWE-184