VDB
CVE-2026-75884
CVE-2026-75884
PUBLISHED
CVSS 9.1 CRITICAL
Reported by redhat · Published September 23, 2026
A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can exploit this to escalate privileges to OpenShift namespace-level access and exfiltrate namespace secrets.
Risk Scores
CVSS 3.1
9.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 8 | 0:4.5.36-1.el8ap |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 9 | 0:4.5.36-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:4.6.33-1.el8ap |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:4.6.33-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:4.7.17-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1789673739 |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | 1789580684 |
| Red Hat | Red Hat Ansible Automation Platform 2 | |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:4.7.17-1.el9ap, 0:4.7.17-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1789673739 |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 9 | 0:4.5.36-1.el9ap, 0:4.5.36-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 8 | 0:4.5.36-1.el8ap, 0:4.5.36-1.el8ap |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:4.6.33-1.el8ap |
| Red Hat | Red Hat Ansible Automation Platform 2 | |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:4.6.33-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | 1789580684 |
Timeline
- Sep 23, 2026 Coalition ESS Score
- Sep 23, 2026 CVE Published
- Sep 24, 2026 EPSS Score
- Sep 24, 2026 Distribution Patch
- Sep 24, 2026 Security Advisory
- Sep 25, 2026 Distribution Patch
- Sep 25, 2026 Distribution Patch
- Sep 25, 2026 Distribution Patch
- Sep 25, 2026 Distribution Patch
- Sep 25, 2026 Security Advisory
- Sep 25, 2026 Security Advisory
- Sep 25, 2026 Security Advisory
References
- RHSA-2026:71113 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:71114 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:71115 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:71177 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:71179 vendor-advisoryx_refsource_REDHAT
- vdb-entryx_refsource_REDHAT
- RHBZ#2517893 issue-trackingx_refsource_REDHAT