VDB

CVE-2025-14025

CVE-2025-14025 PUBLISHED CVSS 8.5 HIGH

Reported by redhat · Published January 8, 2026

A flaw was found in Ansible Automation Platform (AAP). Read-only scoped OAuth2 API Tokens in AAP, are enforced at the Gateway level for Gateway-specific operations. However, this vulnerability allows read-only tokens to perform write operations on backend services (e.g., Controller, Hub, EDA). If this flaw were exploited, an attacker‘s capabilities would only be limited by role based access controls (RBAC).

Risk scores

CVSS 3.1
8.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

VendorProductVersions
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 80:2.5.20260106-1.el8ap
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 90:2.5.20260106-1.el9ap
Red HatRed Hat Ansible Automation Platform 2.6 for RHEL 90:2.6.20260106-1.el9ap
Red HatRed Hat Ansible Automation Platform 2.5sha256:2df290b61d7aac08deec2973d0a9b98788f6b619e974af0b3f4b61c759c7e464
Red HatRed Hat Ansible Automation Platform 2.6sha256:766c7570afc4e9b163a3256a0d7c699327905c1d24213229acb0b96a9e65b615
Red HatRed Hat Ansible Automation Platform 2.5*
Red HatRed Hat Ansible Automation Platform 2.6*
Red HatRed Hat Ansible Automation Platform 2.6 for RHEL 90:2.6.20260106-1.el9ap
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 90:2.5.20260106-1.el9ap
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 80:2.5.20260106-1.el8ap

Timeline

  • Jan 8, 2026 CVE Published
  • Jan 8, 2026 PoC Published (5 in total, the first dated here)
  • Jan 9, 2026 EPSS Score (30 in total, the first dated here)
  • Jan 9, 2026 CVE Updated
  • Mar 3, 2026 Distribution Patch (4 in total, the first dated here)
  • Mar 3, 2026 Security Advisory (5 in total, the first dated here)
  • Jun 22, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2025-14025
vulnetix vdb fixes CVE-2025-14025

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-14025/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›