RHSA-2026:50344HighCVSS 7.8
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-11332 — ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
🎯 Affected products29
- Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel9@sha256:63a33a31c78e63e9398d43746afcdc8191082199ecdd97ee8672e11bd9ee38da_amd64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel9@sha256:9fd908e1288087f8d5d0005e3504ba63845ab09da6de3799ed74ea56ce1da7bf_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel9@sha256:eaff418c61c18481e2f8ffc27ac97d2de8b054d44ee100e6b44f67f4ece092ff_s390x as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel9@sha256:ec85a1c528ddaeb4c76cefface2a9956bd5d3e894cd87766efeba06300875680_arm64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel9@sha256:485d745450ae75dcb490fcce53bb0224c4fe456a86d8df4aac1a8c5f8d7a8de5_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel9@sha256:81f82abd0fdb2091d6d44c58943a6d0a453dcef9729ce893e92328cedfd5879c_arm64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel9@sha256:86879da8664569eba452b5e3c6dea74e8ffbd4cd3ee6203485e9b54ca706c8e0_s390x as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel9@sha256:f957c1c65a757d01bb854909c78816b17159c92265c2b331fd7609a93d140f28_amd64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel9@sha256:0efabbe4c5cc2dae35a72f970bb7dcb7e2d715e8b6b89406e58cafb85233de65_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel9@sha256:1674c0447f75467aeb6ec805555c3bff71063b624d1586e4ee34ee29d6058c02_s390x as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel9@sha256:30df1347e819778ffc8799a13141ad1cd14bca7353203ab7d840e09c7421ed69_amd64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel9@sha256:7b58c8de114e091334c4013f57233f067c537db550b60719536bb7340976969b_arm64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel9@sha256:22afd316e3913de2354bdd4a775f221b5a7aa0d5c64d86d4161bc9acbadf87da_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel9@sha256:6339f8e10711ecadcb731b0a644fddb34bec8820182bca336a915963f5f80802_arm64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel9@sha256:6f13d8db58e9ea141ff025a56ddb09bce9a83fd281de4ca4da92b6c2114e2cd0_s390x as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel9@sha256:7e2f0ae0d47e819a41fb829cf1c8f5ce065144a5f6193b6544c05e1a302803ee_amd64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/de-supported-rhel9@sha256:69a739d44bc360bd05b08c21f51d0d37e818520b39cd4c054ee554298983f0bb_s390x as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/de-supported-rhel9@sha256:b0183663737b40b5e1658293604d00e6c40daf13931fe90229d56153e756a899_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/de-supported-rhel9@sha256:de9856ba77f5b4578e8a5395c6a29fe936bbeb6b05863fd5f18a6ae1b4d5f8f1_arm64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/de-supported-rhel9@sha256:dfc9d33e625bd5f23700b4c302983538aca38aab6493a48707a9a33fa7bd051c_amd64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9@sha256:19b829a3f92eec433f27ac96d828fca1dbdbf314f6982c1d67c1c750a648f693_s390x as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9@sha256:6e55d750f6a7a529e3d6c1459b4b71e4b12362cbfe0f5236a1de384e1d68f886_arm64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9@sha256:aba9f9e274f0b87bcdc13b9cabf9dc078d9ae8e58dc17b90be8486ce4b4d6748_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9@sha256:c634cd0519ae961fab9d02679acc42eda4d85314ccbad45c1408e7062c83646f_amd64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9@sha256:31d278d15097ad25fc985b0fdfa0b19faa9725d3d4ec5c4019a5bc30817d01fd_arm64 as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9@sha256:778e0c0f952304da0b10ecb1e25bd719126d1c557e6665bf3bb67512b1a45a04_s390x as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9@sha256:8a396a27e2c970eba3d1005b537e0ccc27b25e430a684efda22f2007dc35ce71_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
- registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9@sha256:fb40bf2ffd4bdd09c0992be77e69cc4e4b50b83f2dd03ed39dedc32ec223cb91_amd64 as a component of Red Hat Ansible Automation Platform 2.5
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2026:50344
- externalhttps://access.redhat.com/security/cve/CVE-2026-11332
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50344.json