Database/Control plane, storage & DevOps
Ansible Automation Platform EDA: crafted requests and job templates leak trusted-proxy headers and stream URLs
Impact
An authenticated AAP user can use crafted requests and job templates to read internal infrastructure headers - X-Trusted-Proxy, X-Envoy-* and similar - along with event stream URLs. Those headers are what the platform's own front end uses to decide a request is trusted, so exfiltrating them lets the attacker spoof trusted requests, inject events into streams, or escalate privileges inside the automation platform. Since AAP is often the thing holding credentials for an entire fleet, event injection there means arbitrary automation running against GPU nodes. This is a distinct path from CVE-2025-9907 (test-mode test_headers) even though the two ship in the same errata.
Who can reach it
Authenticated AAP user able to create or run job templates and send requests to the event stream endpoints. Red Hat scores it local with high privilege required.
What to do
Apply the AAP errata for your release (RHSA-2025:19201 / 19221 for 2.5, RHSA-2025:23069 / 23131 for 2.6) and restart the platform services. Rotate any proxy or trusted-header secrets that a user with job-template access could already have read.
References
Related entries
- Ansible Automation Platform Gateway: double-slash gateway_path lets an admin plant a credential-harvesting routeCVE-2025-9909 · Red Hat Ansible Automation Platform Gateway (route creation, gateway_path)Medium
- ansible-core: symlinked ~/.ssh lets an unprivileged user on a managed node escalate to rootCVE-2026-123037 · ansible-core user module (generate_ssh_key symlink handling)Medium
- JumpServer: Jinja2 injection in Applet Host fields executes commands on the control nodeCVE-2026-44845 · JumpServer (Applet Host deployment, Jinja2 template injection)Medium
- ansible-core git module: repository URL starting with a dash is parsed as a git option, enabling command executionCVE-2026-84503 · ansible-core (ansible.builtin.git module)Medium
- GlusterFS (glusterd management): An authenticated TLS client can use gluster cli --remote-host to add itself to theCVE-2018-10841 · GlusterFS (glusterd management)Medium
- Intel SPS (HECI subsystem compartmentalisation): Insufficient compartmentalisation in the HECI interfaceCVE-2021-0060 · Intel SPS (HECI subsystem compartmentalisation)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.