Red Hat has issued a security advisory (RHSA-2026:13545) for Red Hat Ansible Automation Platform 2.6 container release, addressing 24 CVEs including CVE-2025-68121 and others. The vulnerabilities span multiple CWE categories such as improper input validation, access control issues, code injection, and authentication weaknesses. The advisory updates container images and related components to remediate these vulnerabilities. The update is classified as important with high severity, and no exploits are currently known in the wild. Users are advised to apply this update after ensuring all prior relevant errata are installed.

The vulnerabilities collectively pose a high security risk to Red Hat Ansible Automation Platform 2.6 deployments, potentially allowing attackers to exploit weaknesses related to input validation, authentication, access control, and code execution. Exploitation could lead to unauthorized actions or compromise of automation workflows. However, no active exploitation has been reported. The update mitigates these risks by addressing the identified vulnerabilities.

Red Hat has released an official update for Ansible Automation Platform 2.6 container images that addresses these vulnerabilities. Users should apply this update following Red Hat's documented upgrade procedures and ensure all previously released errata relevant to their systems are applied beforehand. No additional mitigation actions are specified or required beyond applying the vendor-provided update.