Red Hat Security Advisory

RHSA-2026:71192

Red Hat Ansible Automation Platform 2.5 Container Release Update

Released 2026-09-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel9, registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9, registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9

TI-2026-36731 CVE-2026-49825 · GHSA-4jhm-jv67-739f

HIGH 69

lxml is a library for processing XML and HTML in the Python language.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00297 Published 2026-08-20 Partial fix · 6.1.1, 0.4.5 CWE-184

TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53

MEDIUM 46

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-770

TI-2025-35716 CVE-2025-57847 · GHSA-49g2-wpmf-55pv

LOW 30

A container privilege escalation flaw was found in certain Ansible Automation Platform images.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00186 Published 2026-04-08 Partial fix · 1789001438, 1789023765 +12 CWE-276