RHSA-2026:13508

See a problem?
Please try reporting it to the source first.
Source
https://access.redhat.com/errata/RHSA-2026:13508
Import Source
https://security.access.redhat.com/data/osv/RHSA-2026:13508.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2026:13508
Upstream
  • CVE-2026-25679
  • CVE-2026-39373
  • CVE-2026-6266
Related
Published
2026-05-05T10:11:48Z
Modified
2026-05-12T10:05:51Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
Details
References

Affected packages

Red Hat:ansible_automation_platform:2.6::el10
receptor

Package

Name
receptor
Purl
pkg:rpm/redhat/receptor

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-3.el10ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor-debuginfo

Package

Name
receptor-debuginfo
Purl
pkg:rpm/redhat/receptor-debuginfo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-3.el10ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor-debugsource

Package

Name
receptor-debugsource
Purl
pkg:rpm/redhat/receptor-debugsource

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-3.el10ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptorctl

Package

Name
receptorctl
Purl
pkg:rpm/redhat/receptorctl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-3.el10ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
Red Hat:ansible_automation_platform:2.6::el9
automation-controller

Package

Name
automation-controller
Purl
pkg:rpm/redhat/automation-controller

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-controller-cli

Package

Name
automation-controller-cli
Purl
pkg:rpm/redhat/automation-controller-cli

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-controller-server

Package

Name
automation-controller-server
Purl
pkg:rpm/redhat/automation-controller-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-controller-ui

Package

Name
automation-controller-ui
Purl
pkg:rpm/redhat/automation-controller-ui

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-controller-venv-tower

Package

Name
automation-controller-venv-tower
Purl
pkg:rpm/redhat/automation-controller-venv-tower

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-markdown

Package

Name
python3.12-markdown
Purl
pkg:rpm/redhat/python3.12-markdown

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.10.2-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-gateway-server

Package

Name
automation-gateway-server
Purl
pkg:rpm/redhat/automation-gateway-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+activitystream

Package

Name
python3.12-django-ansible-base+activitystream
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Bactivitystream

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+api_documentation

Package

Name
python3.12-django-ansible-base+api_documentation
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Bapi_documentation

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+authentication

Package

Name
python3.12-django-ansible-base+authentication
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Bauthentication

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+channel_auth

Package

Name
python3.12-django-ansible-base+channel_auth
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Bchannel_auth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+feature_flags

Package

Name
python3.12-django-ansible-base+feature_flags
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Bfeature_flags

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+jwt_consumer

Package

Name
python3.12-django-ansible-base+jwt_consumer
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Bjwt_consumer

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+oauth2_provider

Package

Name
python3.12-django-ansible-base+oauth2_provider
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Boauth2_provider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+rbac

Package

Name
python3.12-django-ansible-base+rbac
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Brbac

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+redis_client

Package

Name
python3.12-django-ansible-base+redis_client
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Bredis_client

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+resource_registry

Package

Name
python3.12-django-ansible-base+resource_registry
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Bresource_registry

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base+rest_filters

Package

Name
python3.12-django-ansible-base+rest_filters
Purl
pkg:rpm/redhat/python3.12-django-ansible-base%2Brest_filters

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-django-ansible-base

Package

Name
python3.12-django-ansible-base
Purl
pkg:rpm/redhat/python3.12-django-ansible-base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.20260422-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-pyasn1

Package

Name
python3.12-pyasn1
Purl
pkg:rpm/redhat/python3.12-pyasn1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.6.3-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-gateway-proxy-debugsource

Package

Name
automation-gateway-proxy-debugsource
Purl
pkg:rpm/redhat/automation-gateway-proxy-debugsource

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.14-2.el9

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-gateway-proxy-server

Package

Name
automation-gateway-proxy-server
Purl
pkg:rpm/redhat/automation-gateway-proxy-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.14-2.el9

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-gateway-proxy-server-debuginfo

Package

Name
automation-gateway-proxy-server-debuginfo
Purl
pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.14-2.el9

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor

Package

Name
receptor
Purl
pkg:rpm/redhat/receptor

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor-debuginfo

Package

Name
receptor-debuginfo
Purl
pkg:rpm/redhat/receptor-debuginfo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor-debugsource

Package

Name
receptor-debugsource
Purl
pkg:rpm/redhat/receptor-debugsource

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptorctl

Package

Name
receptorctl
Purl
pkg:rpm/redhat/receptorctl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-platform-ui

Package

Name
automation-platform-ui
Purl
pkg:rpm/redhat/automation-platform-ui

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.6.8-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-pyOpenSSL

Package

Name
python3.12-pyOpenSSL
Purl
pkg:rpm/redhat/python3.12-pyOpenSSL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:26.0.0-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-pyjwt+crypto

Package

Name
python3.12-pyjwt+crypto
Purl
pkg:rpm/redhat/python3.12-pyjwt%2Bcrypto

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.12.1-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-pyjwt

Package

Name
python3.12-pyjwt
Purl
pkg:rpm/redhat/python3.12-pyjwt

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.12.1-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
python3.12-jwcrypto

Package

Name
python3.12-jwcrypto
Purl
pkg:rpm/redhat/python3.12-jwcrypto

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.5.7-1.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
Red Hat:ansible_automation_platform_developer:2.6::el9
automation-controller

Package

Name
automation-controller
Purl
pkg:rpm/redhat/automation-controller

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-controller-cli

Package

Name
automation-controller-cli
Purl
pkg:rpm/redhat/automation-controller-cli

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-controller-server

Package

Name
automation-controller-server
Purl
pkg:rpm/redhat/automation-controller-server

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-controller-ui

Package

Name
automation-controller-ui
Purl
pkg:rpm/redhat/automation-controller-ui

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
automation-controller-venv-tower

Package

Name
automation-controller-venv-tower
Purl
pkg:rpm/redhat/automation-controller-venv-tower

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.7.11-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor

Package

Name
receptor
Purl
pkg:rpm/redhat/receptor

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor-debuginfo

Package

Name
receptor-debuginfo
Purl
pkg:rpm/redhat/receptor-debuginfo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor-debugsource

Package

Name
receptor-debugsource
Purl
pkg:rpm/redhat/receptor-debugsource

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptorctl

Package

Name
receptorctl
Purl
pkg:rpm/redhat/receptorctl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
Red Hat:ansible_automation_platform_inside:2.6::el9
receptor

Package

Name
receptor
Purl
pkg:rpm/redhat/receptor

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor-debuginfo

Package

Name
receptor-debuginfo
Purl
pkg:rpm/redhat/receptor-debuginfo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptor-debugsource

Package

Name
receptor-debugsource
Purl
pkg:rpm/redhat/receptor-debugsource

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"
receptorctl

Package

Name
receptorctl
Purl
pkg:rpm/redhat/receptorctl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.6.4-2.el9ap

Database specific

source 
"https://security.access.redhat.com/data/osv/RHSA-2026:13508.json"