CVE-2026-0598— Ansible-lightspeed: broken object level authorization leading to cross-user ai conversation context injection in ansible lightspeed api

Quick assessment

Copy summary Copy citation

Affected

Red Hat Red Hat Ansible Automation Platform 2.6

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Red Hat Ansible Automation Platform 2是美国红帽（Red Hat）公司的一款构建、部署和管理自动化的软件。 Red Hat Ansible Automation Platform 2存在安全漏洞，该漏洞源于处理AI聊天交互的对话端点未正确验证会话标识符是否属于发出请求的已认证用户，可能导致拥有有效凭据的攻击者访问或影响其他用户的对话，从而暴露敏感数据或进行未授权操作。

CVE-2026-0598 affects Red Hat Red Hat Ansible Automation Platform 2.6. No confirmed in-the-wild exploitation; assess based on exposure. Red Hat Ansible Automation Platform 2是美国红帽（Red Hat）公司的一款构建、部署和管理自动化的软件。 Red Hat Ansible Automation Platform 2存在安全漏洞，该漏洞源于处理AI聊天交互的对话端点未正确验证会话标识符是否属于发出请求的已认证用户，可能导致拥有有效凭据的攻击者访问或影响其他 CVE-2026-0598 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-0598

I. Basic Information for CVE-2026-0598

Affected Products

II. Public POCs for CVE-2026-0598

III. Intelligence Information for CVE-2026-0598

Vendor Advisories for CVE-2026-0598 (3)

• https://access.redhat.com/security/cve/CVE-2026-0598 vdb-entry x_refsource_REDHAT
• 🔗 2427094 – (CVE-2026-0598) CVE-2026-0598 ansible-lightspeed: Broken Object Level Authorization Leading to Cross-User AI Conversation Context Injection in Ansible Lightspeed API Read full article issue-tracking x_refsource_REDHAT
• 🔗 RHSA-2026:13545 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT

• https://www.cve.org/CVERecord?id=CVE-2026-0598

IV. Related Vulnerabilities

V. Comments for CVE-2026-0598