awx-mcp-server (>=1.1.3 <=1.2.0), broker (>=0.0.0 <=0.6.12) +1 more potentially affected by CVE-2026-52902 via awxkit (>=23.9.0 <=24.6.1)

awxkit PYPI version =23.9.0, =1.1.3, =0.0.0, =1.5.0, =2.0.1 Source cves: CVE-2026-52902 Source advisory: SNYK:PYTHON-AWXKIT-17339772...

PT-2026-47736

Name of the Vulnerable Software and Affected Versions awxkit affected versions not specified Description A path traversal issue exists in the CLI tool for AWX. The YAML !include directive fails to sanitize file paths, which allows an attacker to create a malicious YAML file. When a user imports...