#red-hat
10 articles
CVE-2026-84719: Permission Bypass in Red Hat Ansible Automation Platform
A flaw was found in the Ansible Automation Platform automation-controller. When a WorkflowJobTemplate is copied, the deep-copy permission sanitizer validates only the inventory, unified_job_template, ...
CVE-2015-5287: Privilege Escalation in Red Hat ABRT via Symlink Attack
The abrt-hook-ccpp helper in ABRT before 2.7.1 allows local users to gain privileges via a symlink attack on a file with a predictable name...
CVE-2026-11861 and CVE-2026-13097: FreeIPA authentication bypass via Active Directory trust
Active Directory users can bypass authentication to FreeIPA services - the portal, SMB server and LDAP directory - by impersonating a client name in the Kerberos Ticket Granting Service...
CVE-2026-18963: Account takeover in Keycloak via forced password reset
A flaw in the reset-credentials flow allows forcing a password reset for any user without clicking the verification link, leading to account takeover...
CVE-2026-66792: Privilege Escalation in Red Hat ACM (multicloud-operators-subscription)
A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafte...
CVE-2026-66795: CSR Validation Flaw in Red Hat ACM (managedcluster-import-controller)
A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR) auto-approval logic improperly validates incoming CSRs, specifically by not inspecting the signer name o...
CVE-2026-71472: Command Injection in Red Hat ACM (acm-search-v2)
A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource (CR) editor, to inject malicious shell commands or...
CVE-2026-56160: improper authorization in Azure Red Hat OpenShift (ARO) (CVSS 9.1)
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network....
CVE-2026-11807: missing authorization exposing plaintext credentials in Event-Driven Ansible websocket API (CVSS 9.6)
A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messa...
CVE-2026-10840: Excessive RBAC permissions in Red Hat OpenShift Pipelines
A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources ...