Vulnerabilities

TI-2025-09094 CVE-2025-9909 · GHSA-2fx4-vwf2-pw99

Aap-gateway: improper path validation in gateway allows credential exfiltration

LOW 31

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00184 Published 2026-02-27 Fixed in 3.1.1-1.el8ap, 25.12.0-1.el8ap +39 CWE-647

TI-2025-09093 CVE-2025-9908 · GHSA-c2g3-cfch-p5h4

LOW 31

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00219 Published 2026-02-27 Fixed in 3.1.1-1.el8ap, 25.12.0-1.el8ap +39 CWE-200

TI-2025-09092 CVE-2025-9907 · GHSA-3mcc-r9wq-f9g6

LOW 31

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00184 Published 2026-02-27 Fixed in 3.1.1-1.el8ap, 25.12.0-1.el8ap +39 CWE-200