MAL-015

MAL-015 : Évasion d'isolation 2 dans Ansible Tower Les installations d'Ansible Tower sur certaines configurations Rhel 7/8 sont potentiellement vulnérables aux évasions « Job Isolation », qui permettent à un attaquant d'élever ses privilèges vers l'utilisateur « awx » depuis l'extérieur de...

CVE-2021-20253

CVE-2021-20253: تصعيد الامتيازات عبر الهروب من عزل الوظائف في Ansible Tower تم العثور على خلل في ansible-tower. التثبيت الافتراضي معرض للخطر من الهروب من عزل الوظائف مما يسمح للمهاجم برفع الامتيازات من مستخدم منخفض الامتيازات إلى مستخدم awx من خارج البيئة المعزولة. أكبر تهديد من هذه الثغرة هو لسر...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: kibana, gitlab-rails-ce, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards, awx, tensorflow-gpu-jupyter, jupyter-base-notebook, librechat, opensearch-dashboards-fips, gitlab-rails-ce-fips, wazuh-dashboard, langfuse...

GHSA-JXRP-R7GX-Q4J8 vulnerabilities

Vulnerabilities for packages: kibana, gitlab-rails-ce, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards, awx, tensorflow-gpu-jupyter, jupyter-base-notebook, librechat, opensearch-dashboards-fips, gitlab-rails-ce-fips, wazuh-dashboard, langfuse...

CVE-2026-87819 vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

GHSA-QPF5-3WFW-FH7Q vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

GHSA-G5VV-9GXW-82HX vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

GHSA-WHH4-5Q6C-9V3X vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

GHSA-2PXQ-5VCG-RQ29 vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

CVE-2026-87817 vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

GHSA-239G-WHFQ-7XJ9 vulnerabilities

Vulnerabilities for packages: awx, nemo-rl-cuda-13.0...

automation-controller: automation-controller: SystemJob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

awx: awx: Privilege escalation to OpenShift namespace via pod_spec_override injection in container groups

A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...

automation-controller: automation-controller-container: automation-controller/AWX: Bulk Job Launch checks instance_groups at read level instead of use level, allowing execution-placement authorization bypass

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

awx: awx: Privilege escalation to OpenShift namespace via pod_spec_override injection in container groups

A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...

automation-controller: automation-controller: SystemJob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

awx: awx: Privilege escalation to OpenShift namespace via pod_spec_override injection in container groups

A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

CVE-2026-75884

A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...

CVE-2026-84724 Automation-controller: automation-controller: systemjob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...