Red Hat Ansible Automation Platform 2.4 for RHEL 8 — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Red Hat Ansible Automation Platform 2.4 for RHEL 8, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-84719	Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane) CWE-862	9.9	Critical	2026-09-23
CVE-2026-75884	Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groups CWE-184	9.1	Critical	2026-09-23
CVE-2026-84502	Automation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote --upload-pack` yields rce on the controller-task control-plane pod CWE-88	9.9	Critical	2026-09-23
CVE-2026-84474	Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioning-callback host match CWE-807	9.9	Critical	2026-09-23
CVE-2026-12564	Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf CWE-918	9.6	Critical	2026-08-18
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads CWE-401	7.5	High	2024-03-21
CVE-2023-5764	Ansible: template injection CWE-1336	7.1	High	2023-12-12
CVE-2023-5189	Hub: insecure galaxy-importer tarfile extraction CWE-23	6.3	Medium	2023-11-14
CVE-2023-4380	Platform: token exposed at importing project CWE-532	6.3	Medium	2023-10-04
CVE-2023-4237	Platform: ec2_key module prints out the private key directly to the standard output CWE-497	7.3	High	2023-10-04

All 10 known CVE vulnerabilities affecting Red Hat Ansible Automation Platform 2.4 for RHEL 8 with full Chinese analysis, references, and POCs where available.