Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
Priority LOW 35CWE-88Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 22 fixed, 5 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-88.
Summary
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00222 12th percentileScored 2026-11-07
Fix Partial ansible-core (PyPI): 2.16.19rc1, 2.18.18rc1, 2.19.11rc1 +2Red Hat: 21 advisoriesRed Hat: 22 fixed, 5 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | — | 1:2.16.19-1.el8ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | — | 1:2.16.19-1.el8ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | — | 1:2.16.19-1.el8ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | — | 1:2.16.19-1.el9ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | — | 1:2.16.19-1.el9ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | — | 1:2.16.19-1.el9ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 | — | 2:2.16.19-1.el10ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 | — | 2:2.16.19-1.el10ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | — | 1:2.16.19-1.el9ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | — | 1:2.16.19-1.el9ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | — | 1:2.16.19-1.el9ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 10 | — | 2:2.16.19-1.el10ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 10 | — | 2:2.16.19-1.el10ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 9 | — | 1:2.16.19-1.el9ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 9 | — | 1:2.16.19-1.el9ap | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 9 | — | 1:2.16.19-1.el9ap | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | 1:2.16.16-2.el10_2.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | 1:2.16.14-1.el10_0.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 2.16.3-4.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 1:2.14.18-3.el9_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | 1:2.14.14-1.el9_4.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | 1:2.14.18-1.el9_6.1 | Patch available | CNA |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | — | 1:2.16.19-1.el9sat | Patch available | CNA |
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | — | 1:2.16.19-1.el9sat | Patch available | CNA |
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | — | 1.3.1-5.el9pc | Patch available | CNA |
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | — | 3.73.30-3.el9pc | Patch available | CNA |
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 | — | 1:2.16.19-1.el9sat | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | — | 1785381341 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | — | 1785429657 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | — | 1785430174 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | — | 1785425335 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | — | 1785449441 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | — | 1785647559 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | — | 1785649812 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | — | 1785633038 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | — | 1785775360 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | — | 1785446384 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | — | 1785448519 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | — | 1785374869 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | — | 1785375273 | Patch available | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | — | 1792138710 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1784821670 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | — | 1793175207 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | — | 1793175483 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | — | 1791981285 | Patch available | CNA |
| Red Hat | Migration Toolkit for Applications 8 | — | — | Not affected | CNA |
| Red Hat | Migration Toolkit for Virtualization | — | — | No fix listed | CNA |
| Red Hat | Migration Toolkit for Virtualization | — | — | No fix listed | CNA |
| Red Hat | OpenShift Service Mesh 3 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ansible Automation Platform Ansible Core 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform Ansible Core 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform Ansible Core 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform Ansible Core 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 5 | — | — | No fix listed | CNA |
| Red Hat | Self-service automation portal 2 | — | — | No fix listed | CNA |
| Red Hat | Service Telemetry Framework 1.5 | — | — | Not affected | CNA |
| Red Hat | Service Telemetry Framework 1.5 | — | — | Not affected | CNA |
| — | ansible-core (PyPI) | before 2.16.19rc1 | 2.16.19rc1 | Patch available | GHSA-w8p5-mx5w-cpqj |
| — | ansible-core (PyPI) | 2.17.0b1 to before 2.18.18rc1 | 2.18.18rc1 | Patch available | GHSA-w8p5-mx5w-cpqj |
| — | ansible-core (PyPI) | 2.19.0b1 to before 2.19.11rc1 | 2.19.11rc1 | Patch available | GHSA-w8p5-mx5w-cpqj |
| — | ansible-core (PyPI) | 2.20.0b1 to before 2.20.7rc1 | 2.20.7rc1 | Patch available | GHSA-w8p5-mx5w-cpqj |
| — | ansible-core (PyPI) | 2.21.0b1 to before 2.21.1rc1 | 2.21.1rc1 | Patch available | GHSA-w8p5-mx5w-cpqj |
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el8ap Patch available CNA
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el8ap Patch available CNA
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el8ap Patch available CNA
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9ap Patch available CNA
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9ap Patch available CNA
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9ap Patch available CNA
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 VendorRed Hat Affected — Fixed in 2:2.16.19-1.el10ap Patch available CNA
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 VendorRed Hat Affected — Fixed in 2:2.16.19-1.el10ap Patch available CNA
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9ap Patch available CNA
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9ap Patch available CNA
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9ap Patch available CNA
- Red Hat Ansible Automation Platform 2.7 for RHEL 10 VendorRed Hat Affected — Fixed in 2:2.16.19-1.el10ap Patch available CNA
- Red Hat Ansible Automation Platform 2.7 for RHEL 10 VendorRed Hat Affected — Fixed in 2:2.16.19-1.el10ap Patch available CNA
- Red Hat Ansible Automation Platform 2.7 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9ap Patch available CNA
- Red Hat Ansible Automation Platform 2.7 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9ap Patch available CNA
- Red Hat Ansible Automation Platform 2.7 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9ap Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 1:2.16.16-2.el10_2.1 Patch available CNA
- Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 1:2.16.14-1.el10_0.1 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.16.3-4.el8_10 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1:2.14.18-3.el9_8.1 Patch available CNA
- Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1:2.14.14-1.el9_4.1 Patch available CNA
- Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 1:2.14.18-1.el9_6.1 Patch available CNA
- Red Hat Satellite 6.17 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9sat Patch available CNA
- Red Hat Satellite 6.18 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9sat Patch available CNA
- Red Hat Satellite 6.18 for RHEL 9 VendorRed Hat Affected — Fixed in 1.3.1-5.el9pc Patch available CNA
- Red Hat Satellite 6.18 for RHEL 9 VendorRed Hat Affected — Fixed in 3.73.30-3.el9pc Patch available CNA
- Red Hat Satellite 6.19 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.16.19-1.el9sat Patch available CNA
- Red Hat Ansible Automation Platform 2.5 VendorRed Hat Affected — Fixed in 1785381341 Patch available CNA
- Red Hat Ansible Automation Platform 2.5 VendorRed Hat Affected — Fixed in 1785429657 Patch available CNA
- Red Hat Ansible Automation Platform 2.5 VendorRed Hat Affected — Fixed in 1785430174 Patch available CNA
- Red Hat Ansible Automation Platform 2.5 VendorRed Hat Affected — Fixed in 1785425335 Patch available CNA
- Red Hat Ansible Automation Platform 2.5 VendorRed Hat Affected — Fixed in 1785449441 Patch available CNA
- Red Hat Ansible Automation Platform 2.6 VendorRed Hat Affected — Fixed in 1785647559 Patch available CNA
- Red Hat Ansible Automation Platform 2.6 VendorRed Hat Affected — Fixed in 1785649812 Patch available CNA
- Red Hat Ansible Automation Platform 2.6 VendorRed Hat Affected — Fixed in 1785633038 Patch available CNA
- Red Hat Ansible Automation Platform 2.6 VendorRed Hat Affected — Fixed in 1785775360 Patch available CNA
- Red Hat Ansible Automation Platform 2.7 VendorRed Hat Affected — Fixed in 1785446384 Patch available CNA
- Red Hat Ansible Automation Platform 2.7 VendorRed Hat Affected — Fixed in 1785448519 Patch available CNA
- Red Hat Ansible Automation Platform 2.7 VendorRed Hat Affected — Fixed in 1785374869 Patch available CNA
- Red Hat Ansible Automation Platform 2.7 VendorRed Hat Affected — Fixed in 1785375273 Patch available CNA
- Red Hat Ansible Automation Platform 2.7 VendorRed Hat Affected — Fixed in 1792138710 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1784821670 Patch available CNA
- Red Hat OpenShift Container Platform 4.19 VendorRed Hat Affected — Fixed in 1793175207 Patch available CNA
- Red Hat OpenShift Container Platform 4.20 VendorRed Hat Affected — Fixed in 1793175483 Patch available CNA
- Red Hat OpenShift Container Platform 4.21 VendorRed Hat Affected — Fixed in 1791981285 Patch available CNA
- Migration Toolkit for Applications 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Migration Toolkit for Virtualization VendorRed Hat Affected — Fixed in — No fix listed CNA
- Migration Toolkit for Virtualization VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Service Mesh 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ansible Automation Platform Ansible Core 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform Ansible Core 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform Ansible Core 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform Ansible Core 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 5 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Self-service automation portal 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Service Telemetry Framework 1.5 VendorRed Hat Affected — Fixed in — Not affected CNA
- Service Telemetry Framework 1.5 VendorRed Hat Affected — Fixed in — Not affected CNA
- ansible-core (PyPI) Vendor— Affected before 2.16.19rc1 Fixed in 2.16.19rc1 Patch available GHSA-w8p5-mx5w-cpqj
- ansible-core (PyPI) Vendor— Affected 2.17.0b1 to before 2.18.18rc1 Fixed in 2.18.18rc1 Patch available GHSA-w8p5-mx5w-cpqj
- ansible-core (PyPI) Vendor— Affected 2.19.0b1 to before 2.19.11rc1 Fixed in 2.19.11rc1 Patch available GHSA-w8p5-mx5w-cpqj
- ansible-core (PyPI) Vendor— Affected 2.20.0b1 to before 2.20.7rc1 Fixed in 2.20.7rc1 Patch available GHSA-w8p5-mx5w-cpqj
- ansible-core (PyPI) Vendor— Affected 2.21.0b1 to before 2.21.1rc1 Fixed in 2.21.1rc1 Patch available GHSA-w8p5-mx5w-cpqj
CPE names CNA · 47
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:ansible_automation_platform:2.5::el8 | 2.5 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform:2.5::el9 | 2.5 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8 | 2.5 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9 | 2.5 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8 | 2.5 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9 | 2.5 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform:2.6::el10 | 2.6 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform:2.6::el9 | 2.6 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10 | 2.6 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9 | 2.6 | — | Red Hat |
- cpe:/a:redhat:ansible_automation_platform:2.5::el8 Versions 2.5 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform:2.5::el9 Versions 2.5 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8 Versions 2.5 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9 Versions 2.5 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8 Versions 2.5 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9 Versions 2.5 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform:2.6::el10 Versions 2.6 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform:2.6::el9 Versions 2.6 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10 Versions 2.6 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9 Versions 2.6 — ·Red Hat
Show 37 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9 | 2.6 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform:2.7::el10 | 2.7 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform:2.7::el9 | 2.7 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform_developer:2.7::el10 | 2.7 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform_developer:2.7::el9 | 2.7 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform_inside:2.7::el9 | 2.7 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:10.2 | 10.2 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux_eus:10.0 | 10.0 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::appstream | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:9.4::appstream | 9.4 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.6::appstream | 9.6 | — | Red Hat |
| cpe:/a:redhat:satellite:6.17::el9 | 6.17 | — | Red Hat |
| cpe:/a:redhat:satellite_capsule:6.17::el9 | 6.17 | — | Red Hat |
| cpe:/a:redhat:satellite_maintenance:6.17::el9 | 6.17 | — | Red Hat |
| cpe:/a:redhat:satellite_utils:6.17::el9 | 6.17 | — | Red Hat |
| cpe:/a:redhat:satellite:6.18::el9 | 6.18 | — | Red Hat |
| cpe:/a:redhat:satellite_capsule:6.18::el9 | 6.18 | — | Red Hat |
| cpe:/a:redhat:satellite_maintenance:6.18::el9 | 6.18 | — | Red Hat |
| cpe:/a:redhat:satellite_utils:6.18::el9 | 6.18 | — | Red Hat |
| cpe:/a:redhat:satellite:6.19::el9 | 6.19 | — | Red Hat |
| cpe:/a:redhat:satellite_capsule:6.19::el9 | 6.19 | — | Red Hat |
| cpe:/a:redhat:satellite_maintenance:6.19::el9 | 6.19 | — | Red Hat |
| cpe:/a:redhat:satellite_utils:6.19::el9 | 6.19 | — | Red Hat |
| cpe:/a:redhat:discovery:2::el9 | 2 | — | Red Hat |
| cpe:/a:redhat:openshift:4.19::el9 | 4.19 | — | Red Hat |
| cpe:/a:redhat:openshift:4.20::el9 | 4.20 | — | Red Hat |
| cpe:/a:redhat:openshift:4.21::el9 | 4.21 | — | Red Hat |
| cpe:/a:redhat:migration_toolkit_applications:8 | 8 | — | Red Hat |
| cpe:/a:redhat:migration_toolkit_virtualization:2 | 2 | — | Red Hat |
| cpe:/a:redhat:service_mesh:3 | 3 | — | Red Hat |
| cpe:/a:redhat:acm:2 | 2 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform:2 | 2 | — | Red Hat |
| cpe:/a:redhat:ansible_core:2 | 2 | — | Red Hat |
| cpe:/a:redhat:openshift:5 | 5 | — | Red Hat |
| cpe:/a:redhat:ansible_portal:2 | 2 | — | Red Hat |
| cpe:/a:redhat:stf:1.5 | 1.5 | — | Red Hat |
- cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9 Versions 2.6 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform:2.7::el10 Versions 2.7 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform:2.7::el9 Versions 2.7 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform_developer:2.7::el10 Versions 2.7 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform_developer:2.7::el9 Versions 2.7 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform_inside:2.7::el9 Versions 2.7 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
- cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
- cpe:/a:redhat:satellite:6.17::el9 Versions 6.17 — ·Red Hat
- cpe:/a:redhat:satellite_capsule:6.17::el9 Versions 6.17 — ·Red Hat
- cpe:/a:redhat:satellite_maintenance:6.17::el9 Versions 6.17 — ·Red Hat
- cpe:/a:redhat:satellite_utils:6.17::el9 Versions 6.17 — ·Red Hat
- cpe:/a:redhat:satellite:6.18::el9 Versions 6.18 — ·Red Hat
- cpe:/a:redhat:satellite_capsule:6.18::el9 Versions 6.18 — ·Red Hat
- cpe:/a:redhat:satellite_maintenance:6.18::el9 Versions 6.18 — ·Red Hat
- cpe:/a:redhat:satellite_utils:6.18::el9 Versions 6.18 — ·Red Hat
- cpe:/a:redhat:satellite:6.19::el9 Versions 6.19 — ·Red Hat
- cpe:/a:redhat:satellite_capsule:6.19::el9 Versions 6.19 — ·Red Hat
- cpe:/a:redhat:satellite_maintenance:6.19::el9 Versions 6.19 — ·Red Hat
- cpe:/a:redhat:satellite_utils:6.19::el9 Versions 6.19 — ·Red Hat
- cpe:/a:redhat:discovery:2::el9 Versions 2 — ·Red Hat
- cpe:/a:redhat:openshift:4.19::el9 Versions 4.19 — ·Red Hat
- cpe:/a:redhat:openshift:4.20::el9 Versions 4.20 — ·Red Hat
- cpe:/a:redhat:openshift:4.21::el9 Versions 4.21 — ·Red Hat
- cpe:/a:redhat:migration_toolkit_applications:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:migration_toolkit_virtualization:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:service_mesh:3 Versions 3 — ·Red Hat
- cpe:/a:redhat:acm:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:ansible_core:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:openshift:5 Versions 5 — ·Red Hat
- cpe:/a:redhat:ansible_portal:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:stf:1.5 Versions 1.5 — ·Red Hat
Remediation
- Fix · GHSA-w8p5-mx5w-cpqj ansible-core (PyPI) Fixed in 2.16.19rc1 Advisory →
- Fix · GHSA-w8p5-mx5w-cpqj ansible-core (PyPI) Fixed in 2.18.18rc1 Advisory →
- Fix · GHSA-w8p5-mx5w-cpqj ansible-core (PyPI) Fixed in 2.19.11rc1 Advisory →
- Fix · GHSA-w8p5-mx5w-cpqj ansible-core (PyPI) Fixed in 2.20.7rc1 Advisory →
- Fix · GHSA-w8p5-mx5w-cpqj ansible-core (PyPI) Fixed in 2.21.1rc1 Advisory →
Red Hat 21 advisories
- RHSA-2026:92281 Released 2026-11-04 · Red Hat rating ImportantOpenShift Container Platform 4.19.54 security and extras update
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator
- RHSA-2026:92284 Released 2026-11-03 · Red Hat rating ImportantOpenShift Container Platform 4.20.45 security and extras update
- Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator, registry.redhat.io/openshift4/ose-ptp-rhel9-operator
- RHSA-2026:87124 Released 2026-10-21 · Red Hat rating CriticalRed Hat Ansible Automation Platform 2.7 Container Release Update
- Red Hat Ansible Automation Platform 2.7 registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9, registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9, registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9 +8
Show 18 more Red Hat advisories
- RHSA-2026:83703 Released 2026-10-20 · Red Hat rating ImportantOpenShift Container Platform 4.21.39 security and extras update
- Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-cluster-capacity-rhel9 +6
- RHSA-2026:67466 Released 2026-09-14 · Red Hat rating Importantansible-core security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) ansible-core-1:2.14.18-1.el9_6.1, ansible-test-1:2.14.18-1.el9_6.1
- RHSA-2026:67467 Released 2026-09-14 · Red Hat rating Importantansible-core security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) ansible-core-1:2.14.14-1.el9_4.1, ansible-test-1:2.14.14-1.el9_4.1
- RHSA-2026:67465 Released 2026-09-14 · Red Hat rating Importantansible-core security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) ansible-core-1:2.16.14-1.el10_0.1, ansible-test-1:2.16.14-1.el10_0.1
- RHSA-2026:66248 Released 2026-09-09 · Red Hat rating Importantansible-core security update
- Red Hat Enterprise Linux AppStream (v. 8) ansible-core-2.16.3-4.el8_10, ansible-test-2.16.3-4.el8_10
- RHSA-2026:63385 Released 2026-09-03 · Red Hat rating ImportantSatellite 6.19.4 Async Update
- Red Hat Satellite 6.19 for RHEL 9 ansible-core-1:2.16.19-1.el9sat, ansible-test-1:2.16.19-1.el9sat, openvox-server-8.15.2-1.el9sat +3
- RHSA-2026:63387 Released 2026-09-03 · Red Hat rating ImportantSatellite 6.17.11 Async Update
- Red Hat Satellite 6.17 for RHEL 9 ansible-core-1:2.16.19-1.el9sat, ansible-test-1:2.16.19-1.el9sat, openvox-server-8.15.2-1.el9sat +3
- RHSA-2026:63386 Released 2026-09-03 · Red Hat rating ImportantSatellite 6.18.9 Async Update
- Red Hat Satellite 6.18 for RHEL 9 ansible-core-1:2.16.19-1.el9sat, ansible-test-1:2.16.19-1.el9sat, openvox-server-8.15.2-1.el9sat +4
- RHSA-2026:57149 Released 2026-08-19 · Red Hat rating Importantansible-core security update
- Red Hat Enterprise Linux AppStream (v. 9) ansible-core-1:2.14.18-3.el9_8.1, ansible-test-1:2.14.18-3.el9_8.1
- RHSA-2026:57148 Released 2026-08-19 · Red Hat rating Importantansible-core security update
- Red Hat Enterprise Linux AppStream (v. 10) ansible-core-1:2.16.16-2.el10_2.1, ansible-test-1:2.16.16-2.el10_2.1
- RHSA-2026:50479 Released 2026-08-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Container Release Update
- Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9, registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9 +7
- RHSA-2026:50357 Released 2026-08-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Container Release Update
- Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel8, registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel8, registry.redhat.io/ansible-automation-platform-25/hub-rhel8 +1
- RHSA-2026:50344 Released 2026-08-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Container Release Update
- Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9, registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9
- RHSA-2026:50340 Released 2026-08-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.7 Container Release Update
- Red Hat Ansible Automation Platform 2.7 registry.redhat.io/ansible-automation-platform-27/controller-rhel9, registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9, registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9 +7
- RHSA-2026:46836 Released 2026-07-27 · Red Hat rating ImportantA Subscription Management tool for finding and reporting Red Hat product usage
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
- RHSA-2026:42079 Released 2026-07-20 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 ansible-core-2:2.16.19-1.el10ap, receptor-1.6.6-1.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, automation-controller-venv-tower-4.7.14-3.el9ap, automation-gateway-proxy-2.6.17-1.el9ap +5
- RHSA-2026:42078 Released 2026-07-20 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 ansible-core-1:2.16.19-1.el8ap, ansible-test-1:2.16.19-1.el8ap, automation-controller-4.6.30-2.el8ap +24
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, ansible-test-1:2.16.19-1.el9ap, automation-controller-4.6.30-2.el9ap +24
- RHSA-2026:42080 Released 2026-07-20 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.7 for RHEL 10 ansible-core-2:2.16.19-1.el10ap, receptor-1.6.6-1.el10ap
- Red Hat Ansible Automation Platform 2.7 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, receptor-1.6.6-1.el9ap
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Migration Toolkit for Virtualization | Affected | No fix yet |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet |
| Red Hat Ansible Automation Platform Ansible Core 2 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet |
| Self-service automation portal 2 | Affected | No fix yet |
| Red Hat Ansible Automation Platform 2.5 | Fixed | RHSA-2026:50344, RHSA-2026:50357 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Fixed | RHSA-2026:42078 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Fixed | RHSA-2026:42078 |
| Red Hat Ansible Automation Platform 2.6 | Fixed | RHSA-2026:50479 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Fixed | RHSA-2026:42079 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Fixed | RHSA-2026:42079 |
| Red Hat Ansible Automation Platform 2.7 | Fixed | RHSA-2026:50340, RHSA-2026:87124 |
| Red Hat Ansible Automation Platform 2.7 for RHEL 10 | Fixed | RHSA-2026:42080 |
| Red Hat Ansible Automation Platform 2.7 for RHEL 9 | Fixed | RHSA-2026:42080 |
| Red Hat Discovery 2 | Fixed | RHSA-2026:46836 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:57148 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:66248 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:57149 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:67467 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:67465 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:67466 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2026:92281 |
| Red Hat OpenShift Container Platform 4.20 | Fixed | RHSA-2026:92284 |
| Red Hat OpenShift Container Platform 4.21 | Fixed | RHSA-2026:83703 |
| Red Hat Satellite 6.17 for RHEL 9 | Fixed | RHSA-2026:63387 |
| Red Hat Satellite 6.18 for RHEL 9 | Fixed | RHSA-2026:63386 |
| Red Hat Satellite 6.19 for RHEL 9 | Fixed | RHSA-2026:63385 |
Not affected: 21 products
- Migration Toolkit for Applications 8
- OpenShift Service Mesh 3
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Ansible Automation Platform 2
- Red Hat Ansible Automation Platform 2.5
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Red Hat Ansible Automation Platform 2.6
- Red Hat Ansible Automation Platform 2.6 for RHEL 10
- Red Hat Ansible Automation Platform 2.6 for RHEL 9
- Red Hat Ansible Automation Platform 2.7
- Red Hat Ansible Automation Platform 2.7 for RHEL 10
- Red Hat Ansible Automation Platform 2.7 for RHEL 9
- Red Hat Discovery 2
- Red Hat OpenShift Container Platform 4.19
- Red Hat OpenShift Container Platform 4.20
- Red Hat OpenShift Container Platform 4.21
- Red Hat Satellite 6.17 for RHEL 9
- Red Hat Satellite 6.18 for RHEL 9
- Red Hat Satellite 6.19 for RHEL 9
- Service Telemetry Framework 1.5
Timeline
- 2026-10-02 Threatist record created from CVE-2026-11332
- 2026-10-03 Alias added: GHSA-w8p5-mx5w-cpqj
- 2026-10-08 Affected versions changed · CNA
- 2026-10-20 Fix available: RHSA-2026:83703 · Red Hat
- 2026-10-20 Fix available: Red Hat OpenShift Container Platform 4.21 · Red Hat
- 2026-10-20 Fix available: openshift4/ose-ansible-rhel9-operator@1791981285 · CNA
- 2026-10-20 1 new reference · CNA
- 2026-10-21 Fix available: ansible-automation-platform-27/platform-resource-rhel9-operator@1792138710 · CNA
- 2026-10-21 1 new reference · CNA
- 2026-10-22 Fix available: RHSA-2026:87124 · Red Hat
- 2026-10-22 Affected versions changed · Red Hat
- 2026-10-31 Affected versions changed · CNA
- 2026-10-31 Affected versions changed · Red Hat
- 2026-11-02 Affected versions changed · CNA
- 2026-11-03 Affected versions changed · Red Hat
- 2026-11-03 Fix available: openshift4/ose-ansible-rhel9-operator@1793175483 · CNA
- 2026-11-03 1 new reference · CNA
- 2026-11-03 Fix available: RHSA-2026:92284 · Red Hat
- 2026-11-03 Fix available: Red Hat OpenShift Container Platform 4.20 · Red Hat
- 2026-11-04 Fix available: openshift4/ose-ansible-rhel9-operator@1793175207 · CNA
- 2026-11-04 1 new reference · CNA
- 2026-11-04 Fix available: RHSA-2026:92281 · Red Hat
- 2026-11-04 Fix available: Red Hat OpenShift Container Platform 4.19 · Red Hat
- 2026-11-04 Affected versions changed · CNA
References
Advisory 22
- RHSA-2026:42078
- RHSA-2026:42079
- RHSA-2026:42080
- RHSA-2026:46836
- RHSA-2026:50340
- RHSA-2026:50344
- RHSA-2026:50357
- RHSA-2026:50479
- RHSA-2026:57148
- RHSA-2026:57149
- RHSA-2026:63385
- RHSA-2026:63386
- RHSA-2026:63387
- RHSA-2026:66248
- RHSA-2026:67465
- RHSA-2026:67466
- RHSA-2026:67467
- RHSA-2026:83703
- RHSA-2026:87124
- RHSA-2026:92281
- RHSA-2026:92284
- https://nvd.nist.gov/vuln/detail/CVE-2026-11332
Other 6
- https://access.redhat.com/security/cve/CVE-2026-11332
- RHBZ#2485379
- https://github.com/ansible/ansible
- https://github.com/ansible/ansible/pull/87070
- https://github.com/ansible/ansible/commit/edee59aa15abcc74d920bb3e9c3835ab8db05a2f
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11332.json
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-11332 · CVE Program
- CVE-2026-11332 · NVD
- FIRST EPSS
- GHSA-w8p5-mx5w-cpqj · GitHub Advisory Database · CC BY 4.0
- CVE-2026-11332 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences