Skip to content
OpenAdvisories
Medium · 6.7 CVE-2025-9907 EUVD-2025-208132GHSA-3mcc-r9wq-f9g6

Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda

Published Feb 27, 2026 · Updated Nov 5, 2026 · Assigned by redhat

Description

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerability allows exposure of sensitive client credentials and internal infrastructure headers via the test_headers field when an event stream is in test mode. The possible outcome includes leakage of internal infrastructure details, accidental disclosure of user or system credentials, privilege escalation if high-value tokens are exposed, and persistent sensitive data exposure to all users with read access on the event stream.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 — —
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 — —
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 — —
Red Hat Red Hat Ansible Automation Platform 2.5 — —
Red Hat Red Hat Ansible Automation Platform 2.6 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Red Hat Ansible Automation Platform Inside 2 ansible-builder 3.1.1-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Inside 2 ansible-lint +2 25.12.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Inside 2 ansible-runner +1 2.4.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Inside 2 ansible-sign 0.1.4-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Inside 2 bindep 2.13.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Inside 2 python3.11-distlib 0.4.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Inside 2 python3.11-ruamel-yaml-clib 0.2.15-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Inside 2 python3.11-subprocess-tee 0.4.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Inside 2 python3.11-typing-extensions 4.15.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Inside 2 receptor +1 1.6.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 ansible-builder 3.1.1-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 ansible-dev-environment 25.12.2-1.1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 ansible-runner +1 2.4.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 ansible-sign 0.1.4-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.6.23-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 bindep 2.13.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 molecule +7 25.12.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-distlib 0.4.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-django 4.2.25-1.el9ap RHSA-2025:23069, RHSA-2025:19201
Red Hat Ansible Automation Platform Developer 2 python3.11-execnet 2.1.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-gunicorn 23.0.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-pluggy 1.6.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-pytest 9.0.1-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-pytest-xdist 3.8.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-ruamel-yaml-clib 0.2.15-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-subprocess-tee 0.4.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-tox-ansible 25.12.0-1.2.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 python3.11-typing-extensions 4.15.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform Developer 2 receptor +1 1.6.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 ansible-automation-platform-installer 2.5-20.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 ansible-builder 3.1.1-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 ansible-dev-environment 25.12.2-1.1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 ansible-runner +1 2.4.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 ansible-sign 0.1.4-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 automation-controller +4 4.6.23-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 automation-controller-fapolicyd 1.0-5.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 automation-eda-controller +4 1.1.14-1.el8ap RHSA-2025:23069, RHSA-2025:19201
Red Hat Ansible Automation Platform 2 automation-gateway +13 2.5.20251210-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 automation-hub +1 4.10.10-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 automation-platform-ui 2.6.2-1.el9ap RHSA-2025:19201
Red Hat Ansible Automation Platform 2 bindep 2.13.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 molecule +7 25.12.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-distlib 0.4.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-django 4.2.25-1.el9ap RHSA-2025:23069, RHSA-2025:19201
Red Hat Ansible Automation Platform 2 python3.11-execnet 2.1.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-galaxy-importer 0.4.36-2.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-gunicorn 23.0.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-pluggy 1.6.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-pytest 9.0.1-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-pytest-xdist 3.8.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-ruamel-yaml-clib 0.2.15-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-subprocess-tee 0.4.2-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-tox-ansible 25.12.0-1.2.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 python3.11-typing-extensions 4.15.0-1.el8ap RHSA-2025:23069
Red Hat Ansible Automation Platform 2 receptor +1 1.6.2-1.el8ap RHSA-2025:23069

Advisories 3

References