CVE-2025-14025

creationtimestamp| type| source ---|---|--- 2026-01-08 15:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwaqmb5rv2v 2026-01-08 15:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwarkscob2a 2026-01-08 15:03:50+00:00|...

CVE-2025-14025

A flaw was found in Ansible Automation Platform AAP. Read-only scoped OAuth2 API Tokens in AAP, are enforced at the Gateway level for Gateway-specific operations. However, this vulnerability allows read-only tokens to perform write operations on backend services e.g., Controller, Hub, EDA. If thi...