RHSA-2026:25928HighCVSS 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Container Release Update

Published
June 15, 2026
Last Modified
August 16, 2026

🔗 CVE IDs covered (4)

CVE-2026-44188 →CVE-2026-44431 →CVE-2026-44432 →CVE-2026-48526 →

📋 Description

CVE-2026-44188 — ansible-lightspeed: Ansible Lightspeed: Session hijacking and unauthorized data access due to insufficient session expiration CVE-2026-44431 — urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44432 — urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-48526 — python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

🎯 Affected products61

  • Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:51ed36bb2a95df762fa0239faf7bcc70b68dbd5f744bd2094f5e29ecc6700eb3_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:8426a97219763cb74366755416683d79e8b56c95da290b0fa2fff59a5db51db3_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:0ddbc5f91472e5872912da6131e71df85e87b79ef8ea3d38bb4247f1456d4a00_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:f75e2056244899ae5e2ecab1404663bf554f7451cc521e0d7a75a2f40ecac7a1_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:7dcd3a60624fa4f6c9f591ef8ffc48ba0f5152b7108a6070fa8f680c20168c95_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:a8135ef1879793f311f2661c380bd5fbbedc14a4d195aeaa5a4cb04ad4845f49_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:2211c0e7cd573bf30873329c46e91f98ff01fcb7e0753823d4c0517217c31ac3_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:a6903f68684eb8f5bc688b75e390727b5ed48b864784657e49611966266c9f3f_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:5ffa88952441ddab19ada1bd2603e3614b75d10ef51e38098c2d22d8b358b518_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:afca3fb56256dcb7cb04a67fb52bff0160064c65f901a70fa3e97ed30ddaab7a_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:5e1a04dbcddc141f0026ccee871050cf974175b62c3d22b33e5ec3aec54128d3_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:ddb59951ccb324d8bd6ae9c6a6093f211bcb08d8cac7c4fb10f191e421aa59d3_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:55ad63ce31700829d0df23692d02cb7796404b122f790f9329f4b742c5f6783e_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:587ec88d08d4113f07778f81aae6de62c9e9d971b677b1375b547aa7dd1178c8_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:5aa7b2e33b9480f45faf8b4686bfb264838b5c1c62c537c5a2ec7b5a8617ac49_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:830fa58a60fbd7f768e236b2052edd1d37fc7cf383a0ccd65483b09fa5b07bd2_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:a18f77ccf6c524f5d0c11d34d6787b22548194b6897abd491de85b00fc1befd3_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:b58803576b7a2e119ffe83ceb252d8d402f1611c891c2c6ac7c4e0399acd848f_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:daefffce756c8c7918377279ada50a9cc127ab0939ed308c786940d5dc42e0d9_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:dfde61892d055e89b056f7fb8863f3a0961df2bb8890323b8301670fc8afc66b_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:bd7350b62eb0f2de274eafd7dc32e4cf3073bd597e282268ff17777b9fe5d102_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:fe72e508123fdd2795959017e5572689b039d5bdfc675dc45673c5586fceea17_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:abaebe0c1fbc2a013fad8ec411a449705c8a78759b82ddbe661afd99e90dada5_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c4f9e3356a2217008bd6f69325ae74d547703f1bcfe39bd74737f30c6914f711_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:017495624b22a5825231dd70443dc9ab359da0df5ea16a5a04e0f4dc915b6e0f_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:fcb7685115cfbf0a10ef87d6bb7a43c251c207a4fd7a31c5908cad85b6ae0e1a_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:d15bd832817f039fa3c09d6d74088254b6fae15a5efed7a88279a657b2f23f16_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:e78dd744714feae5ae944c759759bff17c061c7ed2d3bd1454ba763131ed6ee0_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:de3d43a8d9a2cf0d533337e825b078205cc37b01c935a4f68ac152a8a7a7533c_arm64 as a component of Red Hat Ansible Automation Platform 2.7
  • +31 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)