Ansible Automation Platform EDA: unsanitized Git URL injects arguments into git ls-remote

Impact

An authenticated AAP user who can define an Event-Driven Ansible project supplies a Git URL that is handed to git ls-remote without sanitization, letting them inject arguments and run commands on the EDA worker. The EDA worker is a fleet-automation component: it typically holds credentials for the hosts it configures, and when it runs on Kubernetes or OpenShift the attacker can read the pod's ServiceAccount token and move on to cluster access. On a GPU fleet that means the component used to patch and configure nodes becomes the attacker's lever over those nodes.

Who can reach it

Authenticated AAP user with permission to create or edit an EDA project (set its Git source URL). Network-reachable via the AAP API/UI; no admin role required.

What to do

Apply RHSA-2025:9986 for Ansible Automation Platform 2.5 on RHEL 8 or 9 and restart the EDA components. Container-level update plus daemon restart - no node drain or reboot. Rotate the EDA worker's ServiceAccount token and any credentials it held if you believe it was reachable by untrusted users.

References

Related entries

• Ansible Automation Platform EDA: Git branch and refspec values are evaluated as Jinja2 templatesCVE-2025-49521 · Red Hat Ansible Automation Platform EDA (Git branch/refspec Jinja2 evaluation)High
• Jenkins Azure CLI Plugin: Item/Configure permission becomes arbitrary shell execution on the controllerCVE-2025-64140 · Jenkins Azure CLI Plugin (unrestricted command execution on the controller)High
• GitLab CE/EE: crafted sequences let an authenticated user drive unintended internal requests via the proxyCVE-2025-6454 · GitLab CE/EE (outbound request handling through proxy environments)High
• GitLab EE: a developer with group management permissions can escalate to broader system capabilitiesCVE-2025-7691 · GitLab EE (group management permissions)High
• N-able N-central: Improper input validationCVE-2025-8876 · N-able N-centralHigh
• GPUStack: cluster API proxy forwards non-admin requests with a worker's ServiceAccount credentialsCVE-2026-103002 · GPUStack `cluster_apiserver_proxy` (Kubernetes request proxying)High