by Kastro CVE-2026-75884
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8 — Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groups
Description · from the CVE record
A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can exploit this to escalate privileges to OpenShift namespace-level access and exfiltrate namespace secrets.
Affected
ProductAffectedFixed inSource
Red Hat Ansible Automation Platform 2.4 for RHEL 8see advisory0:4.5.36-1.el8apCNA
Red Hat Ansible Automation Platform 2.4 for RHEL 9see advisory0:4.5.36-1.el9apCNA
Red Hat Ansible Automation Platform 2.5 for RHEL 8see advisory0:4.6.33-1.el8apCNA
Red Hat Ansible Automation Platform 2.5 for RHEL 9see advisory0:4.6.33-1.el9apCNA
Red Hat Ansible Automation Platform 2.6 for RHEL 9see advisory0:4.7.17-1.el9apCNA
Red Hat Ansible Automation Platform 2.6see advisory1789673739CNA
Red Hat Ansible Automation Platform 2.7see advisory1789580684CNA
Scores by source
redhat (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total