CVE-2021-20253

CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...

MAL-015

MAL-015: Isolation Escape 2 in Ansible Tower Installations of Ansible Tower on certain Rhel 7/8 setups are potentially vulnerable to “Job Isolation” Escapes that allows an attacker to elevate to the “awx” user from outside the isolated environment. The following files/setups can be leveraged by...

CVE-2026-69097 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow, mlflow-fips, opal, jupyter-all-spark-notebook, datahub-ingestion-fips, awx...

GHSA-9XX9-HW38-H2W9 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow, mlflow-fips, opal, jupyter-all-spark-notebook, datahub-ingestion-fips, awx...

GHSA-JXRP-R7GX-Q4J8 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, gitlab-rails-ce-fips, librechat, opensearch-dashboards, tensorflow-gpu-jupyter, jupyter-base-notebook, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce, awx, langfuse-fips...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, gitlab-rails-ce-fips, librechat, opensearch-dashboards, tensorflow-gpu-jupyter, jupyter-base-notebook, opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard-fips, wazuh-dashboard, gitlab-rails-ce, awx, langfuse-fips...

GHSA-WHH4-5Q6C-9V3X vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

GHSA-QPF5-3WFW-FH7Q vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

CVE-2026-87819 vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

GHSA-G5VV-9GXW-82HX vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

GHSA-239G-WHFQ-7XJ9 vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

GHSA-2PXQ-5VCG-RQ29 vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

CVE-2026-87817 vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

automation-controller: automation-controller: SystemJob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

awx: awx: Privilege escalation to OpenShift namespace via pod_spec_override injection in container groups

A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...

automation-controller: automation-controller-container: automation-controller/AWX: Bulk Job Launch checks instance_groups at read level instead of use level, allowing execution-placement authorization bypass

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

awx: awx: Privilege escalation to OpenShift namespace via pod_spec_override injection in container groups

A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...

automation-controller: automation-controller: SystemJob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

awx: awx: Privilege escalation to OpenShift namespace via pod_spec_override injection in container groups

A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...