6.4
Medium
CVE-2025-57847 A container privilege escalation flaw was found in certain Ansible Automation Platform images
Description
A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This vulnerability allows an attacker to add a new user with any arbitrary UID, including UID 0, gaining full root privileges within the container.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Ansible Automation Platform 2 | Versions not published | |
| Red Hat Ansible Automation Platform 2.5 1789654540 | earliest → < 1789654540 | 1789654540 |
| Red Hat Ansible Automation Platform Ansible Core 2 | Versions not published | |
| Red Hat Ansible Automation Platform 2.16 1789023765 | earliest → < 1789023765 | 1789023765 |
| Red Hat Ansible Automation Platform 2.18 1789001715 | earliest → < 1789001715 | 1789001715 |
| Red Hat Ansible Automation Platform 2.7 1789584820 | earliest → < 1789584820 | 1789584820 |
| Red Hat Ansible Automation Platform 2.6 1789654312 | earliest → < 1789654312 | 1789654312 |
References
- RHSA-2026:42141 access.redhat.com
- RHSA-2026:42144 access.redhat.com
- RHSA-2026:66482 access.redhat.com
- RHSA-2026:66485 access.redhat.com
- RHSA-2026:66486 access.redhat.com
- RHSA-2026:66487 access.redhat.com
- RHSA-2026:67279 access.redhat.com
- RHSA-2026:71177 access.redhat.com
- RHSA-2026:71179 access.redhat.com
- RHSA-2026:71192 access.redhat.com
- RHSA-2026:71210 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2391092 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Ansible Automation Platform 2
The 211 CVEs of Red Hat Ansible Automation Platform 2 →
CVE-2026-123037
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
6.7
Medium
CVE-2026-114236
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…
3.3
Low
CVE-2026-109131
Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl)
5.4
Medium
CVE-2026-92982
A flaw was found in Ansible Operator Plugins
8.5
High