2 matches found
CVE-2026-75884
A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...
9.1CVSS0.00409EPSS
SaveExploits0References7
CVE-2026-75884: Incomplete List of Disallowed Inputs
A flaw was found in AWX. The container group podspecoverride field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can...
9.1CVSS5.8AI score0.00409EPSS
SaveExploits0References2
20