ansible-automation-platform-27/metrics-service-rhel9-operator vulnerabilities
CVEs whose affected-version data names the ansible-automation-platform-27/metrics-service-rhel9-operator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-123037Medium· 6.7Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.ssh_key_gen() guards the key files against symlinks but checks the ~/.ssh directory only with os.path.exists(). An unprivileged user on a managed no…
▾ SunlitRed Hat · ansible-automation-platform-24/hub-rhel8via CVEORG
CVE-2026-92982High· 8.5A flaw was found in Ansible Operator Plugins
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible w…
▾ TwilightRed Hat · mta/mta-rhel9-operatorEPSS 0.47%via NVD