---
id: CVE-2025-9909
title: >-
  Aap-gateway: improper path validation in gateway allows credential
  exfiltration
summary: >-
  A flaw was found in the Red Hat Ansible Automation Platform Gateway route
  creation component. This vulnerability allows credential theft via the
  creation of misleading routes using a double-slash (//) prefix in the
  gateway_path. A malici…
severity: medium
cvss: 6.7
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-647
vendor: Red Hat
product: ansible-builder
affected:
  - ansible-builder (all versions)
  - ansible-creator (all versions)
  - ansible-dev-environment (all versions)
  - ansible-dev-tools (all versions)
  - ansible-lint (all versions)
  - ansible-navigator (all versions)
  - ansible-sign (all versions)
  - automation-gateway (all versions)
  - automation-hub (all versions)
  - bindep (all versions)
  - molecule (all versions)
  - python3.11-ansible-compat (all versions)
  - python3.11-distlib (all versions)
  - python3.11-django (all versions)
  - python3.11-execnet (all versions)
  - python3.11-galaxy-importer (all versions)
  - python3.11-galaxy-ng (all versions)
  - python3.11-gunicorn (all versions)
  - python3.11-pluggy (all versions)
  - python3.11-pytest (all versions)
  - python3.11-pytest-ansible (all versions)
  - python3.11-pytest-xdist (all versions)
  - python3.11-ruamel-yaml-clib (all versions)
  - python3.11-subprocess-tee (all versions)
  - python3.11-tox-ansible (all versions)
  - python3.11-typing-extensions (all versions)
  - ansible-builder (all versions)
  - ansible-creator (all versions)
  - ansible-dev-environment (all versions)
  - ansible-dev-tools (all versions)
  - ansible-lint (all versions)
  - ansible-navigator (all versions)
  - ansible-sign (all versions)
  - automation-gateway (all versions)
  - automation-hub (all versions)
  - bindep (all versions)
  - molecule (all versions)
  - python3.11-ansible-compat (all versions)
  - python3.11-distlib (all versions)
  - python3.11-django (all versions)
  - python3.11-execnet (all versions)
  - python3.11-galaxy-importer (all versions)
  - python3.11-galaxy-ng (all versions)
  - python3.11-gunicorn (all versions)
  - python3.11-pluggy (all versions)
  - python3.11-pytest (all versions)
  - python3.11-pytest-ansible (all versions)
  - python3.11-pytest-xdist (all versions)
  - python3.11-ruamel-yaml-clib (all versions)
  - python3.11-subprocess-tee (all versions)
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-02-27T18:42:58.678456Z'
published: '2026-02-27'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T16:09:22.656Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-9909'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2025:21768'
    label: 'RHSA-2025:21768'
  - url: 'https://access.redhat.com/errata/RHSA-2025:21775'
    label: 'RHSA-2025:21775'
  - url: 'https://access.redhat.com/errata/RHSA-2025:23069'
    label: 'RHSA-2025:23069'
  - url: 'https://access.redhat.com/errata/RHSA-2025:23131'
    label: 'RHSA-2025:23131'
  - url: 'https://access.redhat.com/security/cve/CVE-2025-9909'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2392836'
    label: RHBZ#2392836
tags:
  - cve.org
epss: 0.00184
epssPercentile: 0.08063
ingestedAt: '2026-11-05T22:38:31.334Z'
---

## Overview

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.

## Affected

- `ansible-builder (all versions)`
- `ansible-creator (all versions)`
- `ansible-dev-environment (all versions)`
- `ansible-dev-tools (all versions)`
- `ansible-lint (all versions)`
- `ansible-navigator (all versions)`
- `ansible-sign (all versions)`
- `automation-gateway (all versions)`
- `automation-hub (all versions)`
- `bindep (all versions)`
- `molecule (all versions)`
- `python3.11-ansible-compat (all versions)`
- `python3.11-distlib (all versions)`
- `python3.11-django (all versions)`
- `python3.11-execnet (all versions)`
- `python3.11-galaxy-importer (all versions)`
- `python3.11-galaxy-ng (all versions)`
- `python3.11-gunicorn (all versions)`
- `python3.11-pluggy (all versions)`
- `python3.11-pytest (all versions)`
- `python3.11-pytest-ansible (all versions)`
- `python3.11-pytest-xdist (all versions)`
- `python3.11-ruamel-yaml-clib (all versions)`
- `python3.11-subprocess-tee (all versions)`
- `python3.11-tox-ansible (all versions)`
- `python3.11-typing-extensions (all versions)`
- `ansible-builder (all versions)`
- `ansible-creator (all versions)`
- `ansible-dev-environment (all versions)`
- `ansible-dev-tools (all versions)`
- `ansible-lint (all versions)`
- `ansible-navigator (all versions)`
- `ansible-sign (all versions)`
- `automation-gateway (all versions)`
- `automation-hub (all versions)`
- `bindep (all versions)`
- `molecule (all versions)`
- `python3.11-ansible-compat (all versions)`
- `python3.11-distlib (all versions)`
- `python3.11-django (all versions)`
- `python3.11-execnet (all versions)`
- `python3.11-galaxy-importer (all versions)`
- `python3.11-galaxy-ng (all versions)`
- `python3.11-gunicorn (all versions)`
- `python3.11-pluggy (all versions)`
- `python3.11-pytest (all versions)`
- `python3.11-pytest-ansible (all versions)`
- `python3.11-pytest-xdist (all versions)`
- `python3.11-ruamel-yaml-clib (all versions)`
- `python3.11-subprocess-tee (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.