CVE-2026-76220 vulnerabilities

Vulnerabilities for packages: awx, opal, checkov...

MAL-015

MAL-015: Isolation Escape 2 in Ansible Tower Installations of Ansible Tower on certain Rhel 7/8 setups are potentially vulnerable to “Job Isolation” Escapes that allows an attacker to elevate to the “awx” user from outside the isolated environment. The following files/setups can be leveraged by...

CVE-2026-67322 vulnerabilities

Vulnerabilities for packages: awx, datahub-ingestion, mlflow, mlflow-fips, checkov, opal, datahub-ingestion-fips...

CVE-2026-67325 vulnerabilities

Vulnerabilities for packages: awx, datahub-ingestion, mlflow, checkov, opal, datahub-ingestion-fips...

CVE-2026-76218 vulnerabilities

Vulnerabilities for packages: awx, opal, checkov...

CVE-2026-76219 vulnerabilities

Vulnerabilities for packages: awx, opal, checkov...

CVE-2026-76222 vulnerabilities

Vulnerabilities for packages: awx, opal, checkov...

GHSA-6R2R-WW24-7H52 vulnerabilities

Vulnerabilities for packages: awx, datahub-ingestion, mlflow, checkov, opal, datahub-ingestion-fips...

CVE-2026-67323 vulnerabilities

Vulnerabilities for packages: awx, datahub-ingestion, mlflow, checkov, opal, datahub-ingestion-fips...

GHSA-4VPG-PFJ8-M33Q vulnerabilities

Vulnerabilities for packages: awx, datahub-ingestion, mlflow, checkov, opal, datahub-ingestion-fips...

GHSA-M4F3-G4CQ-HQRX vulnerabilities

Vulnerabilities for packages: awx, datahub-ingestion, mlflow, mlflow-fips, checkov, opal, datahub-ingestion-fips...

GHSA-W672-239G-C3GR vulnerabilities

Vulnerabilities for packages: awx, opal, checkov...

CVE-2026-76217 vulnerabilities

Vulnerabilities for packages: awx, opal, checkov...

GHSA-7JX3-JQCP-HHGC vulnerabilities

Vulnerabilities for packages: awx, opal, checkov...

CVE-2021-20253

CVE-2021-20253: Escalada de Privilegios mediante Escape de Aislamiento de Trabajos en Ansible Tower Se encontró una falla en ansible-tower. La instalación predeterminada es vulnerable a un escape de aislamiento de trabajos que permite a un atacante elevar sus privilegios desde un usuario con poco...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: awx, kubeflow-centraldashboard, azurite, langfuse, prism, semaphore, gitlab-rails-ce-fips, kibana, jitsucom-jitsu, opensearch-dashboards, wazuh-dashboard, gitlab-rails-ce, lerna, opensearch-dashboards-fips, wazuh-dashboard-fips, librechat, langfuse-fips,...

GHSA-39J5-W47M-2GMV vulnerabilities

Vulnerabilities for packages: kibana, jitsucom-jitsu, awx, wazuh-dashboard-fips, kubeflow-centraldashboard, librechat, nextcloud-server, opensearch-dashboards, wazuh-dashboard, langfuse, prism, semaphore, gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, redisinsight, lerna,...

CVE-2026-67318 vulnerabilities

Vulnerabilities for packages: kibana, jitsucom-jitsu, awx, wazuh-dashboard-fips, kubeflow-centraldashboard, librechat, nextcloud-server, opensearch-dashboards, wazuh-dashboard, langfuse, prism, semaphore, gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, redisinsight, lerna,...

CVE-2026-84470

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

EUVD-2026-69605

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...