RHSA-2026:28377: Critical: Red Hat Ansible Automation Platform 2.6 Product Security Update
Critical: Red Hat Ansible Automation Platform 2.6 Product Security Update
Other sources
Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.Security Fix(es): automation-eda-controller: Websocket missing authorization allows credential theft via activationid spoofing (CVE-2026-11807) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/automation-eda-controllerto a version that resolves this vulnerability.Fixed in 1.2.9-2.el9a - Upgrade
Upgrade
redhat/automation-eda-controller-baseto a version that resolves this vulnerability.Fixed in 1.2.9-2.el9a - Upgrade
Upgrade
redhat/automation-eda-controller-base-servicesto a version that resolves this vulnerability.Fixed in 1.2.9-2.el9a - Upgrade
Upgrade
redhat/automation-eda-controller-event-stream-servicesto a version that resolves this vulnerability.Fixed in 1.2.9-2.el9a - Upgrade
Upgrade
redhat/automation-eda-controller-worker-servicesto a version that resolves this vulnerability.Fixed in 1.2.9-2.el9a
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:28377?
The severity of RHSA-2026:28377 is classified as critical with a score of 9.
How do I fix RHSA-2026:28377?
To fix RHSA-2026:28377, you should apply the latest security update to your Red Hat Ansible Automation Platform 2.6 installation.
What vulnerabilities does RHSA-2026:28377 address?
RHSA-2026:28377 addresses critical security vulnerabilities within the Red Hat Ansible Automation Platform components.
When was RHSA-2026:28377 published?
RHSA-2026:28377 was published on June 23, 2026.
Which products are affected by RHSA-2026:28377?
RHSA-2026:28377 affects various components of the Red Hat Ansible Automation Platform, including automation-eda-controller and its associated services.