ansible-automation-platform-26/platform-resource-runner-rhel9 vulnerabilities
CVEs whose affected-version data names the ansible-automation-platform-26/platform-resource-runner-rhel9 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-123037Medium· 6.7Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.ssh_key_gen() guards the key files against symlinks but checks the ~/.ssh directory only with os.path.exists(). An unprivileged user on a managed no…
▾ SunlitRed Hat · ansible-automation-platform-24/hub-rhel8via CVEORG
CVE-2026-52902Medium· 4.7Awxkit: path traversal via yaml !include directive
A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the lo…
▾ SunlitRed Hat · automation-controllerEPSS 0.13%via CVEORG