CVE-2026-12701: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8
CVE-2026-12701 is a critical path traversal vulnerability in the pulpcore component of Red Hat Ansible Automation Platform 2.5 for RHEL 8. The vulnerability arises because the relative_path_validator function does not properly block directory traversal sequences such as "../" in file paths. An authenticated administrator can exploit this to write arbitrary files to locations writable by the Pulp service user during FilesystemExport operations, potentially leading to service compromise or further system exploitation. Red Hat has issued security advisories with patches addressing this issue in Ansible Automation Platform 2.6 and later versions.
AI Analysis
Technical Summary
The vulnerability in pulpcore's relative_path_validator function allows directory traversal by failing to block sequences like "../" anywhere in the path, enabling an authenticated administrator to escape the intended export directory during FilesystemExport operations. Because the file content is user-controlled, this can lead to arbitrary file writes to any location writable by the Pulp service user, which may result in service compromise or further exploitation. Red Hat has released security advisories (RHSA-2026:42078 and RHSA-2026:42079) that include fixes for this vulnerability in Ansible Automation Platform 2.6 for RHEL 9 and 10, and related components.
Potential Impact
An authenticated administrator can exploit this vulnerability to write arbitrary files outside the intended directory, potentially leading to service compromise or further system exploitation. The CVSS 3.1 base score is 9.0 (critical), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.
Mitigation Recommendations
Red Hat has released official fixes for this vulnerability in Ansible Automation Platform 2.6 for RHEL 9 and 10 as detailed in advisories RHSA-2026:42078 and RHSA-2026:42079. Users should apply these updates promptly. For detailed update instructions, refer to the Ansible Automation Platform documentation and the Red Hat advisories. Patch status is confirmed as fixed in these later versions. No alternative mitigations are stated in the vendor advisory.
CVE-2026-12701: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8
Description
CVE-2026-12701 is a critical path traversal vulnerability in the pulpcore component of Red Hat Ansible Automation Platform 2.5 for RHEL 8. The vulnerability arises because the relative_path_validator function does not properly block directory traversal sequences such as "../" in file paths. An authenticated administrator can exploit this to write arbitrary files to locations writable by the Pulp service user during FilesystemExport operations, potentially leading to service compromise or further system exploitation. Red Hat has issued security advisories with patches addressing this issue in Ansible Automation Platform 2.6 and later versions.
CVSS v3.1
Score 9.0critical
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in pulpcore's relative_path_validator function allows directory traversal by failing to block sequences like "../" anywhere in the path, enabling an authenticated administrator to escape the intended export directory during FilesystemExport operations. Because the file content is user-controlled, this can lead to arbitrary file writes to any location writable by the Pulp service user, which may result in service compromise or further exploitation. Red Hat has released security advisories (RHSA-2026:42078 and RHSA-2026:42079) that include fixes for this vulnerability in Ansible Automation Platform 2.6 for RHEL 9 and 10, and related components.
Potential Impact
An authenticated administrator can exploit this vulnerability to write arbitrary files outside the intended directory, potentially leading to service compromise or further system exploitation. The CVSS 3.1 base score is 9.0 (critical), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.
Mitigation Recommendations
Red Hat has released official fixes for this vulnerability in Ansible Automation Platform 2.6 for RHEL 9 and 10 as detailed in advisories RHSA-2026:42078 and RHSA-2026:42079. Users should apply these updates promptly. For detailed update instructions, refer to the Ansible Automation Platform documentation and the Red Hat advisories. Patch status is confirmed as fixed in these later versions. No alternative mitigations are stated in the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-06-19T09:53:04.810Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-12701","vendor":"Red Hat"}]
Threat ID: 6a5e33df2a4a8d598937d1ed
Added to database: 07/20/2026, 14:42:39 UTC
Last enriched: 07/30/2026, 13:24:38 UTC
Last updated: 09/04/2026, 10:52:07 UTC
Views: 83
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.