Skip to content

Vulnerabilities of Red Hat Red Hat Ansible Automation Platform 2.5

Is your version affected?

CVE Summary Score Published
CVE-2026-11807 Eda-server: websocket missing authorization allows credential theft via activation_id spoofing 9.6 Critical Jun 23, 2026
CVE-2026-1615 Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of… 9.8 Critical Feb 9, 2026
CVE-2025-61140 The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution 9.8 Critical Jan 28, 2026

Other Red Hat products