Privilege Escalation Vulnerability in AWX by Red Hat
CVE-2026-75884

9.1CRITICAL

Key Information:

Vendor

Red Hat
Status
Red Hat Ansible Automation Platform 2.4 For Rhel 8
Red Hat Ansible Automation Platform 2.4 For Rhel 9
Red Hat Ansible Automation Platform 2.5 For Rhel 8
Red Hat Ansible Automation Platform 2.5 For Rhel 9
Vendor
CVE Published:
23 September 2026

What is CVE-2026-75884?

A flaw has been identified in AWX where the container group pod_spec_override field employs an incomplete blocklist. This limitation only restricts automountServiceAccountToken, which may lead to the injection of initContainers, overrides of serviceAccountName, and projected service account token volumes. A user with AAP platform administrator privileges can exploit this vulnerability to escalate their access to the OpenShift namespace level, thereby enabling them to exfiltrate sensitive namespace secrets.

Affected Version(s)

Red Hat Ansible Automation Platform 2.4 for RHEL 8 0:4.5.36-1.el8ap

Red Hat Ansible Automation Platform 2.4 for RHEL 9 0:4.5.36-1.el9ap

Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:4.6.33-1.el8ap

References

https://access.redhat.com/errata/RHSA-2026:71113
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71114
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71115
vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Laura Pardo (Red Hat).
.