Description
An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | automation-controller | 4.5.10-1 – < 4.5.10-1 | 4.5.10-1 |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 8 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 9 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ansible Automation Platform Inside 2 | python-zipp +1 | 3.19.2-1.el9ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform Inside 2 | python39-zipp | 3.19.2-1.el8ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform Developer 2 | automation-controller +1 | 4.5.10-1.el8ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform Developer 2 | python-zipp +1 | 3.19.2-1.el9ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform Developer 2 | python39-zipp | 3.19.2-1.el8ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform 2 | automation-controller +4 | 4.5.10-1.el8ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform 2 | python-django +1 | 4.2.15-1.el9ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform 2 | python-grpcio +1 | 1.58.3-1.el9ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform 2 | python-zipp +1 | 3.19.2-1.el9ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform 2 | python39-django +1 | 4.2.15-1.el8ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform 2 | python39-grpcio +1 | 1.58.3-1.el8ap | RHSA-2024:6428 |
| Red Hat Ansible Automation Platform 2 | python39-zipp | 3.19.2-1.el8ap | RHSA-2024:6428 |
Advisories 1
- RHSA-2024:6428 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
References
- RHSA-2024:6428 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-6840 vdb-entry
- RHBZ#2298492 issue-tracking