SecurityOnlineDo Son
Red Hat Ansible flaw leaks credentials via websocket API
Part of the CVE-2026-11807 story · since 26 Jun
- Fri 26 Jun, 01:08 UTC. SecurityOnline, first report. Red Hat Ansible flaw leaks credentials via websocket API. This article, 1st of 1.
An alert has been issued regarding a critical vulnerability in the Red Hat Ansible Automation Platform, identified as CVE-2026-11807, which has a CVSS score of 9.6. The flaw allows unauthorized credential access through a websocket API due to missing authorization checks. It affects versions 2.5 and 2.6 of the platform, enabling authenticated users to disclose sensitive information like OAuth tokens and SSH keys without proper permissions.
Red Hat has provided patches, and users are advised to update their software immediately to mitigate the risk. Currently, there are no reported active exploitations.
How the story developed
1 article from 1 outlet since 26 Jun. Quiet since 26 Jun. This was the first report.
- Fri 26 Jun, 01:08 UTC. SecurityOnline, first report. Red Hat Ansible flaw leaks credentials via websocket API. This article, 1st of 1.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Fri 26 JunDay 01
- Red Hat Ansible flaw leaks credentials via websocket API01:08 · SecurityOnline · First report · This article, 1st of 1