Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-6266— Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking

Quick assessment

Affected
CVE-2026-6266
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Red Hat Ansible Automation Platform（Red Hat AAP）是美国红帽（Red Hat）公司的一款实现战略性自动化的统一解决方案。 Red Hat Ansible Automation Platform存在安全漏洞，该漏洞源于用户自动链接策略基于电子邮件匹配自动链接外部身份提供商身份到现有AAP用户账户而未验证电子邮件所有权，可能导致远程攻击者通过操纵身份提供商提供的电子邮件劫持受害者账户或获得对其他账户的未授权访问。

CVSS 8.3 · High EPSS 0.57% · P45

Possible ATT&CK Techniques 1 AI

T1199 · Trusted Relationship

Affected Version Matrix 17

VendorProduct Version RangeStatus
None None 2.5.0< 2.5.20260422 affected
2.6.0< 2.6.20260422 affected
4.6.0< 4.6.28 affected
4.7.0< 4.7.11 affected
2.5.0< 2.5.20260422 affected
2.6.0< 2.6.20260422 affected
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:4.6.28-3.el8ap< * unaffected
0:2.5.20260422-2.el8ap< * unaffected
0:2.5.20260422-2.el8ap< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 0:4.6.28-3.el9ap< * unaffected
0:2.5.20260422-2.el9ap< * unaffected
0:2.5.20260422-2.el9ap< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.6 1777377014< * unaffected
1777311120< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 0:4.7.11-2.el9ap< * unaffected
0:2.6.20260422-1.el9ap< * unaffected
0:2.6.20260422-1.el9ap< * unaffected

I. Basic Information for CVE-2026-6266

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (IDP) identity to an existing AAP user account based on email matching without verifying email ownership. This allows a remote attacker to potentially hijack a victim's account or gain unauthorized access to other accounts, including administrative accounts, by manipulating the IDP-provided email.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
使用基本弱点进行的认证绕过
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat Ansible Automation Platform 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Ansible Automation Platform（Red Hat AAP）是美国红帽（Red Hat）公司的一款实现战略性自动化的统一解决方案。 Red Hat Ansible Automation Platform存在安全漏洞，该漏洞源于用户自动链接策略基于电子邮件匹配自动链接外部身份提供商身份到现有AAP用户账户而未验证电子邮件所有权，可能导致远程攻击者通过操纵身份提供商提供的电子邮件劫持受害者账户或获得对其他账户的未授权访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 2.5.0 ~ 2.5.20260422 -
- - 4.6.0 ~ 4.6.28 -
- - 2.5.0 ~ 2.5.20260422 -
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:4.6.28-3.el8ap ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:2.5.20260422-2.el8ap ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:2.5.20260422-2.el8ap ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 0:4.6.28-3.el9ap ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 0:2.5.20260422-2.el9ap ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 0:2.5.20260422-2.el9ap ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 0:4.7.11-2.el9ap ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 0:2.6.20260422-1.el9ap ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 0:2.6.20260422-1.el9ap ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat Red Hat Ansible Automation Platform 2.6 1777377014 ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat Red Hat Ansible Automation Platform 2.6 1777311120 ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el9

II. Public POCs for CVE-2026-6266

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-6266

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-6266 (5)

IV. Related Vulnerabilities

Same weakness: CWE-305

V. Comments for CVE-2026-6266

No comments yet

Leave a comment