The vulnerability identified as CVE-2025-61140 affects the value function in jsonpath version 1.1.1, where Prototype Pollution allows an attacker to inject or modify properties on an object's prototype. This can lead to serious impacts including arbitrary code execution, privilege escalation, and denial of service. The weakness is categorized under CWE-1321 and CWE-502, involving deserialization of untrusted data and integrity violations. Red Hat's advisory confirms the vulnerability and provides a security update for affected products, notably Red Hat Ansible Automation Platform 2.5. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Red Hat recommends applying the released patches and updates to remediate the vulnerability.

Successful exploitation of this vulnerability can allow attackers to modify the prototype of objects, leading to arbitrary code execution, privilege escalation, or denial of service conditions. The vulnerability affects the integrity, confidentiality, and availability of affected systems. The CVSS score of 9.8 indicates critical impact with network attack vector and no required privileges or user interaction.

An official fix is available from Red Hat. Users of affected products, including Red Hat Ansible Automation Platform 2.5, should apply the security updates as provided in Red Hat advisory RHSA-2026:3962. Red Hat manages remediation for their products and provides detailed guidance on applying updates. No additional mitigation beyond applying the official patch is indicated.