Red Hat Ansible Automation Platform Vulnerability Advisory: RCE/Path Traversal/SSRF Fixes (RHSA-2026:42079)

Vulnerability Overview Vulnerability Name: RHSA-2026:42079 - Security Advisory Publication Date: 2026-07-20 Update Date: 2026-07-20 Severity: Important CVSS Score: No specific value provided, but classified as "Important" based on the description. Affected Scope Affected Product: Red Hat Ansible Automation Platform 2.6 Specific Vulnerabilities: - ansible-core: Argument injection vulnerability that could lead to arbitrary code execution (CVE-2026-11332). - automation-controller: Path traversal vulnerability allowing arbitrary file overwrite via malicious entry point names (CVE-2026-8643). - automation-controller: Denial of Service vulnerability caused by excessive HTTP response decompression (CVE-2026-44432). - automation-platform-ui: Path traversal vulnerability allowing security policy bypass (CVE-2026-6321). - python3.12-pulpcore: Relative path validator bypass through directory traversal in FilesystemExport (CVE-2026-12701). - receptor: Cross-Site Scripting (XSS) vulnerability via HTML parsing bypass (CVE-2026-27136). Remediation Patch Analysis: The Red Hat Lightspeed patch analysis tool can be used to identify and remediate systems affected by this advisory. Specific Remediation Measures: - Update to the latest version to fix the argument injection vulnerability. - Update to the latest version to fix the path traversal and denial of service vulnerabilities. - Update to the latest version to fix the path traversal vulnerability. - Update to the latest version to fix the relative path validator bypass vulnerability. - Update to the latest version to fix the Cross-Site Scripting vulnerability. Code Blocks No specific POC code or exploit code was provided on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat Ansible Automation Platform Vulnerability Advisory: RCE/Path Traversal/SSRF Fixes (RHSA-2026:42079)

More from this source