Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products107

• Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:ad54609e9b6bbeeecad16578711805067cb1e42fffca4abda9676f8479fa47cc_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:ea84e901df4ec07cf2baa559fff29b343302f7e1921a5c320dae55b9a819ed2e_arm64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:f4ce8b39d0062c4c3dcf15976ba4dad6333d8ea54ab21e7ff0ee2f0887258802_amd64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:ffb79d750cb6b6a2702abc32db8d5a8a1d8ec444cbf9db80293a9e7832b23a6c_s390x as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:088828c0f3f3c7e2e2fa1200bb2c4c19ec5087cf45846c0db08cd2d28ae1c2e1_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:13ffa4947a12703bf8c28488e8c07b15dbdb8d09c5a1c7a7d4ab97bb877c0e4c_arm64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:47afebb5ad5c763c506aedff96b1be8664db6280130e1cca20a24dae170a7cae_amd64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:f0a375b8f43e5955863fdf1932ebb38be9bb84b546f0206912e5babde090a926_s390x as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:8e38a76b331a290124fe7e4403904eb790bfe4092ef4c48137df5859913628d6_s390x as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:930f274d4e6acb7d9698a79f5b1b1592c6d73cab92f41565369c238f285879ce_arm64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:a4791b9d86f69a95e42e12f70effcbab5eae49a3d64da12d0c22efab255c60a8_amd64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:f3a1811b1cdb544cb1f662d46db546b43783e14d1bfd1fb834070c282595afa4_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:20e9ffbef4e48044d11a6176c352e42906c8dc8fd20e433a81be9e9b6a87c4d1_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:2d09e3d4e86b972697a46fc46a44bf484c1c462e0d95d1b30e641db8f40c306e_s390x as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:ab5999ffdb4e82c80425275aab10890cf0eebf6939954da76865c8bd36a07d9f_amd64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:f09a0d2fe259f17751bda0cbb96f97060a3965a50ed3376fe4853a6403488bcd_arm64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:64618853757d3945a589f45abb01072a3e98e6c044a74660305d6fd48d9e0bf5_arm64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:8bb62b250f7b438c51c16c96fdb329184eaeba02a3d042f2f03895ea4be353c7_s390x as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:aaecd2ff774dbe8420a0dfcee44671138e721fbaf8896d7aea9adf637f167d46_amd64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:da0756e82c2ac95757241dc0b012ba80947c799ffbe558371ce088553d7e0296_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:194af9205f4a10aa2b51e85dc5347d9527b06eb3f39329d35c03adbe5f5d2513_amd64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:2b0c96f4d30237ef703ef37c998a9e8ec275325ff70f1ccbd4b7ea64944a4534_s390x as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:34800426a72f77e5b6d8a73c0e9a3197d63bc35bff6652ccaf91e4fe5a9968e6_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:9013af0cead28a26d79a0fa1a2e7603faa51ca469a19f187f02163c62a69bc43_arm64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:2702163cd2cdfa0579ff5f44633c42ed8ae861f6a9760ca9eba53a65b30a2d0c_s390x as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:5532cd0a85614ce547a22633a8cfa89c931b19bdac15a4bdbc89fb83acfc50ea_amd64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a05970974c0d7f7df3836987d3319f2d58f733adbc36a06d75b735875b639a5e_arm64 as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:b29e7dc094c25880b242067b0395a7102d48ce3455488c3d8613d7a63387928f_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
• registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:1282f22329322b9ac9ea0cf426ccffa9124c1419c2519953ac806b02409a1536_amd64 as a component of Red Hat Ansible Automation Platform 2.6
• +77 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade Workaround: Defense-in-depth practices such as using RBAC to enforce the principle of least privilege and careful token management are essential to reduce the scope of impact. See this KCS article for additional details and strategies. https://access.redhat.com/articles/7136004

🔗 References (6)

• selfhttps://access.redhat.com/errata/RHSA-2026:0408
• externalhttps://access.redhat.com/security/cve/CVE-2025-14025
• externalhttps://access.redhat.com/security/cve/CVE-2025-68664
• externalhttps://access.redhat.com/security/updates/classification/
• externalhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/html/release_notes/patch_releases
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0408.json