RHSA-2026:42144HighCVSS 8.0

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
July 20, 2026
Last Modified
September 11, 2026

🔗 CVE IDs covered (5)

CVE-2025-57847 →CVE-2026-8643 →CVE-2026-44431 →CVE-2026-44432 →CVE-2026-48526 →

📋 Description

CVE-2025-57847 — ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions CVE-2026-8643 — python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite CVE-2026-44431 — urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44432 — urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-48526 — python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

🎯 Affected products103

  • Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:1434911740521d4aa4aefae3d9a7d07d5ce4f1fe7dfd76ee888879f8e4bc20f2_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:16b0bdf877796f8882ff1bd07c93b621fdee687885f52cdc6116fbd5f9bd0bd8_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:30987417cfe81e832a1b38b5201355c16674866be6acfd2697e1ce8130779b7a_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:a80e46a918ae103595f27c0975b36b08f56aa0620c370b8e73dce5d56d7f6ee0_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:4e0912b3f8e35711590aa66fd794191dc1ffa392dbcc9cba1724ee45843ffd58_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:77e8d9a158887327575c1161b288686929a1238f83e8d92a846d559f5385d7fc_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:7a8fd6ba94e809a649ee7494957f32b31fdf191cebaa427596213006fd0a67df_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:d581b719e87c42f3af05bf03ea72675263ef1742ec0cdf8ff4e0273c5cd56c3f_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:79c80e0aeb7b83324b5390aa3548f1d061853a38e676028148dd880c496ccd33_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:beeddc5727165656709f27db0c15e7a0583bd283a7dd7307e1aeaed515690469_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:dc9d340f0c8c354b088ca4296362881b0e69983f0669442483c75fedfa3284c6_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:df1d471c4685d6aa01d0447242b255dbeec8467b27a9f25f1a4235e295c41023_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:4ab43312921087cbe05b65d821beb693c117887e4359ad0ec034438902a96188_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:8143800a5591fbc8bd145f9a7938a669069e3ff44a28bb374a6b32012facd867_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:977358c4755a9e57815b09bbc8929e6181d083ab42f9e7d81b3f4942e168272f_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:e3cf265a8aff8d641ba5f29a0d3ea06176139d81044254245bc26d3e8e7178b3_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:096235ef9d5907b0ba2c044a15433a3f46c2f85b3382f4d5e6f334f090297160_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:224f5a242a85423e41be4a35f4e13e05b3e84ddf6c462b7008441a87d614fa6a_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:231b2ba80d5e99675553bb0d1be81e665078e257eb59f0cd4dba9a2d2d8c835d_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:9fd832678f0b02248100210cbe795ac6ab24ccbb85f6663094a0f9bc4791d797_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:5d28684fd8a3e906f982f2775200e2d04e855cf0915d3fd5a5ec75d793174355_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:7408cb36e7ce9afea06171c249192f44feee2ca5d27e409766ffa85570a2b1f7_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:7d3c917731394da67d54c169bbd399ebdb863f962a80b236c824c9e8d00bb322_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:eadd4189df6dac562a8c2fa3febaa691221023fb28c435a8e4f145317c16ed82_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:0503d736cf09e48a0694c3089795036c1c674755b3d8e66cda28acc8473c6dbe_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:21559072b7ca1c0e77c681f46125dfc115883ed59a4dad392982b4d3a3974633_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:97b4a61ec81f882ed077199117e059cb483d3ede7374d93a9f7023c90622bce7_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:ff170806cc5d86bb472a2a734bd09439c897d936ea8724cbe38ccb642ae9d44b_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:1279af9d60d48553fd5b9b5bf184ca994154227df0a47d50d6a5e12904558699_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • +73 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading Workaround: To mitigate this issue, users should avoid installing Python wheels from untrusted sources. It is strongly advised against using `pip install` with elevated privileges, such as `sudo`, when installing wheels. Additionally, administrators should inspect `entry_points.txt` within wheels for path separators or absolute paths before installation.

🔗 References (9)