Input validation error in Ansible Automation Platform - CVE-2025-9909

Vulnerability identifier: #VU118710

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-9909

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to create hidden routes within the application.

The vulnerability exists due to insufficient validation of user-supplied input when creating routes. A remote privileged user can create routes starting with a double slash (//), that look very much like legitimate URLs. This can be used to set up a "honey-pot" route to capture and exfiltrate user credentials.

Ansible Automation Platform
ansible-sign (Red Hat package)
python3.11-ruamel-yaml-clib (Red Hat package)
python3.11-distlib (Red Hat package)
python3.11-subprocess-tee (Red Hat package)
python3.11-galaxy-importer (Red Hat package)
automation-controller-fapolicyd (Red Hat package)
automation-eda-controller (Red Hat package)
python3.11-pluggy (Red Hat package)
receptor (Red Hat package)
python3.11-execnet (Red Hat package)
ansible-runner (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
automation-gateway (Red Hat package)
python3.11-django-ansible-base (Red Hat package)
bindep (Red Hat package)
ansible-builder (Red Hat package)
python3.11-pytest-xdist (Red Hat package)
python3.11-django (Red Hat package)
automation-controller (Red Hat package)
automation-hub (Red Hat package)
python3.11-galaxy-ng (Red Hat package)
python3.11-typing-extensions (Red Hat package)
python3.11-pytest (Red Hat package)
python3.11-gunicorn (Red Hat package)
python3.11-pytest-ansible (Red Hat package)
ansible-creator (Red Hat package)
python3.11-ansible-compat (Red Hat package)
ansible-dev-tools (Red Hat package)
ansible-lint (Red Hat package)
ansible-navigator (Red Hat package)
molecule (Red Hat package)
python3.11-tox-ansible (Red Hat package)
ansible-dev-environment (Red Hat package)

Install updates from vendor's website.

Ansible Automation Platform - update to 2.5
ansible-sign (Red Hat package) - addressed in versions 0.1.4-1.el8ap, 0.1.4-1.el9ap
python3.11-ruamel-yaml-clib (Red Hat package) - addressed in versions 0.2.15-1.el8ap, 0.2.15-1.el9ap
python3.11-distlib (Red Hat package) - addressed in versions 0.4.0-1.el8ap, 0.4.0-1.el9ap
python3.11-subprocess-tee (Red Hat package) - addressed in versions 0.4.2-1.el8ap, 0.4.2-1.el9ap
python3.11-galaxy-importer (Red Hat package) - addressed in versions 0.4.36-2.el8ap, 0.4.36-2.el9ap
automation-controller-fapolicyd (Red Hat package) - addressed in versions 1.0-5.el8ap, 1.0-5.el9ap
automation-eda-controller (Red Hat package) - addressed in versions 1.1.14-1.el8ap, 1.1.14-1.el9ap
python3.11-pluggy (Red Hat package) - addressed in versions 1.6.0-1.el8ap, 1.6.0-1.el9ap
receptor (Red Hat package) - addressed in versions 1.6.2-1.el8ap, 1.6.2-1.el9ap
python3.11-execnet (Red Hat package) - addressed in versions 2.1.2-1.el8ap, 2.1.2-1.el9ap
ansible-runner (Red Hat package) - addressed in versions 2.4.2-1.el8ap, 2.4.2-1.el9ap
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.5-20.el8ap, 2.5-20.el9ap
automation-gateway (Red Hat package) - addressed in versions 2.5.20251210-1.el8ap, 2.5.20251210-1.el9ap
python3.11-django-ansible-base (Red Hat package) - addressed in versions 2.5.20251210-1.el8ap, 2.5.20251210-1.el9ap
bindep (Red Hat package) - addressed in versions 2.13.0-1.el8ap, 2.13.0-1.el9ap
ansible-builder (Red Hat package) - addressed in versions 3.1.1-1.el8ap, 3.1.1-1.el9ap
python3.11-pytest-xdist (Red Hat package) - addressed in versions 3.8.0-1.el8ap, 3.8.0-1.el9ap
python3.11-django (Red Hat package) - addressed in versions 4.2.26-1.el8ap, 4.2.26-1.el9ap
automation-controller (Red Hat package) - addressed in versions 4.6.23-1.el8ap, 4.6.23-1.el9ap
automation-hub (Red Hat package) - addressed in versions 4.10.10-1.el8ap, 4.10.10-1.el9ap
python3.11-galaxy-ng (Red Hat package) - addressed in versions 4.10.10-1.el8ap, 4.10.10-1.el9ap
python3.11-typing-extensions (Red Hat package) - addressed in versions 4.15.0-1.el8ap, 4.15.0-1.el9ap
python3.11-pytest (Red Hat package) - addressed in versions 9.0.1-1.el8ap, 9.0.1-1.el9ap
python3.11-gunicorn (Red Hat package) - addressed in versions 23.0.0-1.el8ap, 23.0.0-1.el9ap
python3.11-pytest-ansible (Red Hat package) - addressed in versions 25.12.0-1.el8ap, 25.12.0-1.el9ap
ansible-creator (Red Hat package) - addressed in versions 25.12.0-1.el8ap, 25.12.0-1.el9ap
python3.11-ansible-compat (Red Hat package) - addressed in versions 25.12.0-1.el8ap, 25.12.0-1.el9ap
ansible-dev-tools (Red Hat package) - addressed in versions 25.12.0-1.el8ap, 25.12.0-1.el9ap
ansible-lint (Red Hat package) - addressed in versions 25.12.0-1.el8ap, 25.12.0-1.el9ap
ansible-navigator (Red Hat package) - addressed in versions 25.12.0-1.el8ap, 25.12.0-1.el9ap
molecule (Red Hat package) - addressed in versions 25.12.0-1.el8ap, 25.12.0-1.el9ap
python3.11-tox-ansible (Red Hat package) - addressed in versions 25.12.0-1.2.el8ap, 25.12.0-1.2.el9ap
ansible-dev-environment (Red Hat package) - addressed in versions 25.12.2-1.1.el8ap, 25.12.2-1.1.el9ap

• https://bugzilla.redhat.com/show_bug.cgi?id=2392836

• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.6
• Multiple vulnerabilities in Ansible Automation Platform 2.5 packages