MAL-015

MAL-015：Ansible Tower 中的隔离逃逸 2 在特定 Rhel 7/8 配置上的 Ansible Tower 安装可能容易受到“作业隔离”逃逸的影响，该逃逸允许攻击者从隔离环境外部提升到“awx”用户。 在 CVE-2021-20253 被修复后，攻击者可以利用以下文件/配置来执行作业隔离逃逸漏洞： 文件“/var/spool/mail/awx”： 如果目标上安装了 SMTP 服务器，攻击者可以创建该文件 也可能由“useradd”等程序创建（如果使用自定义的 awx 用户） 在 Rhel 7 或更低版本中，为了安装 AWX，需要安装运行时版本的...

CVE-2021-20253

CVE-2021-20253: Escalada de Privilegios mediante Escape de Aislamiento de Trabajos en Ansible Tower Se encontró una falla en ansible-tower. La instalación predeterminada es vulnerable a un escape de aislamiento de trabajos que permite a un atacante elevar sus privilegios desde un usuario con poco...

CVE-2026-76220 vulnerabilities

Vulnerabilities for packages: checkov, mlflow, awx, opal...

GHSA-4VPG-PFJ8-M33Q vulnerabilities

Vulnerabilities for packages: opal, awx, datahub-ingestion, checkov, mlflow, datahub-ingestion-fips...

GHSA-6R2R-WW24-7H52 vulnerabilities

Vulnerabilities for packages: opal, awx, datahub-ingestion, checkov, mlflow, datahub-ingestion-fips...

GHSA-M4F3-G4CQ-HQRX vulnerabilities

Vulnerabilities for packages: mlflow-fips, opal, awx, datahub-ingestion, checkov, mlflow, datahub-ingestion-fips...

GHSA-W672-239G-C3GR vulnerabilities

Vulnerabilities for packages: checkov, mlflow, awx, opal...

CVE-2026-67322 vulnerabilities

Vulnerabilities for packages: mlflow-fips, opal, awx, datahub-ingestion, checkov, mlflow, datahub-ingestion-fips...

CVE-2026-67323 vulnerabilities

Vulnerabilities for packages: opal, awx, datahub-ingestion, checkov, mlflow, datahub-ingestion-fips...

CVE-2026-67325 vulnerabilities

Vulnerabilities for packages: opal, awx, datahub-ingestion, checkov, mlflow, datahub-ingestion-fips...

CVE-2026-76218 vulnerabilities

Vulnerabilities for packages: checkov, mlflow, awx, opal...

CVE-2026-76219 vulnerabilities

Vulnerabilities for packages: checkov, mlflow, awx, opal...

CVE-2026-76222 vulnerabilities

Vulnerabilities for packages: checkov, mlflow, awx, opal...

GHSA-7JX3-JQCP-HHGC vulnerabilities

Vulnerabilities for packages: checkov, mlflow, awx, opal...

CVE-2026-76217 vulnerabilities

Vulnerabilities for packages: checkov, mlflow, awx, opal...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: awx, nextcloud-server, opensearch-dashboards, wazuh-dashboard, langfuse, lerna, prism, wazuh-dashboard-fips, langfuse-fips, azurite, gitlab-rails-ce, redisinsight, gitlab-rails-ce-fips, semaphore, kibana, kubeflow-centraldashboard, librechat,...

GHSA-39J5-W47M-2GMV vulnerabilities

Vulnerabilities for packages: kibana, kubeflow-centraldashboard, librechat, awx, gitlab-rails-ce, nextcloud-server, opensearch-dashboards-fips, wazuh-dashboard-fips, redisinsight, gitlab-rails-ce-fips, opensearch-dashboards, wazuh-dashboard, prism, jitsucom-jitsu, langfuse, lerna, langfuse-fips,...

CVE-2026-67318 vulnerabilities

Vulnerabilities for packages: kibana, kubeflow-centraldashboard, librechat, awx, gitlab-rails-ce, nextcloud-server, opensearch-dashboards-fips, wazuh-dashboard-fips, redisinsight, gitlab-rails-ce-fips, opensearch-dashboards, wazuh-dashboard, prism, jitsucom-jitsu, langfuse, lerna, langfuse-fips,...

CVE-2026-84470

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

EUVD-2026-69605

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...