Description (CNA)
A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.format yaml import". This is a client-side vulnerability requiring user interaction.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat Ansible Automation Platform 2.5 for RHEL 8 | unaffected 0:4.6.32-1.el8ap before * |
| Red Hat / Red Hat Ansible Automation Platform 2.5 for RHEL 9 | unaffected 0:4.6.32-1.el9ap before * |
| Red Hat / Red Hat Ansible Automation Platform 2.6 for RHEL 9 | unaffected 0:4.7.16-1.el9ap before * |
| Red Hat / Red Hat Ansible Automation Platform 2.7 for RHEL 10 | unaffected 0:4.8.6-1.el10ap before * |
| Red Hat / Red Hat Ansible Automation Platform 2.7 for RHEL 9 | unaffected 0:4.8.6-1.el9ap before * |
| Red Hat / Red Hat Ansible Automation Platform 2 | unknown |
| Red Hat / Red Hat Ansible Automation Platform 2 | unknown |
| Red Hat / Red Hat Ansible Automation Platform 2 | unknown |
| Red Hat / Red Hat Ansible Automation Platform 2 | unknown |
| Red Hat / Red Hat Ansible Automation Platform 2 | unknown |
| Red Hat / Red Hat Ansible Automation Platform 2 | unknown |
| Red Hat / Red Hat Ansible Automation Platform 2 | unknown |
| Red Hat / Red Hat Ansible Automation Platform 2 | unknown |
| Red Hat / Red Hat Ansible Automation Platform 2 | affected |
| Red Hat / Red Hat Ansible Automation Platform 2 | affected |
CWE
CWE-22
References
- https://access.redhat.com/errata/RHSA-2026:59135
- https://access.redhat.com/errata/RHSA-2026:59136
- https://access.redhat.com/errata/RHSA-2026:59137
- https://access.redhat.com/security/cve/CVE-2026-52902
- https://bugzilla.redhat.com/show_bug.cgi?id=2486729
ADP enrichment
No English description supplied.
No references supplied.