Database/Control plane, storage & DevOps
Ansible Automation Platform EDA: Git branch and refspec values are evaluated as Jinja2 templates
Impact
User-supplied Git branch or refspec strings in an EDA project are rendered as Jinja2 templates, so an authenticated user can inject expressions that run commands or read files on the EDA worker. This is a distinct code path from the git ls-remote argument injection fixed in the same errata (CVE-2025-49520) - the fix covers template evaluation rather than shell argument handling. On OpenShift the worker's ServiceAccount token is readable, giving the attacker whatever cluster rights the automation platform holds over the fleet, including the nodes running GPU workloads.
Who can reach it
Authenticated AAP user able to set the branch or refspec on an EDA project, through the AAP API or UI. No admin role required.
What to do
Apply RHSA-2025:9986 for Ansible Automation Platform 2.5 on RHEL 8 or 9 and restart the EDA components - a container update and daemon restart, not a node operation. Rotate the EDA worker ServiceAccount token and managed-host credentials if untrusted users had project-edit rights.
References
Related entries
- Jenkins Azure CLI Plugin: Item/Configure permission becomes arbitrary shell execution on the controllerCVE-2025-64140 · Jenkins Azure CLI Plugin (unrestricted command execution on the controller)High
- GitLab CE/EE: crafted sequences let an authenticated user drive unintended internal requests via the proxyCVE-2025-6454 · GitLab CE/EE (outbound request handling through proxy environments)High
- GitLab EE: a developer with group management permissions can escalate to broader system capabilitiesCVE-2025-7691 · GitLab EE (group management permissions)High
- N-able N-central: Improper input validationCVE-2025-8876 · N-able N-centralHigh
- GPUStack: cluster API proxy forwards non-admin requests with a worker's ServiceAccount credentialsCVE-2026-103002 · GPUStack `cluster_apiserver_proxy` (Kubernetes request proxying)High
- Apache Airflow: task-written XCom makes the API server instantiate attacker-chosen airflow.* classesCVE-2026-111421 · Apache Airflow API server (Task Execution API XCom storage and deserialization)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.