The Red Hat security advisory RHSA-2025:23196 addresses multiple vulnerabilities affecting the Ansible DevSpaces Container within Red Hat Ansible Automation Platform 2.6. The vulnerabilities include CWE-89 (SQL Injection) and CWE-22 (Path Traversal), identified by CVE-2025-59681, CVE-2025-59682, and CVE-2025-64459. The advisory announces an update to ansible dev-tools to version 2.6 and expands architecture support to ARM, ppc, and s390x. The advisory does not explicitly state fixed versions or detailed patch information but recommends applying all previously released errata before updating. No known exploits in the wild are reported at this time.

The vulnerabilities involve serious issues such as SQL Injection and Path Traversal, which can potentially allow unauthorized data access or manipulation if exploited. The advisory classifies the severity as high, indicating significant risk if these vulnerabilities are exploited. However, no active exploitation has been reported yet.

The vendor advisory recommends updating to the latest ansible dev-tools version 2.6 as part of the Red Hat Ansible Automation Platform 2.6 update. Before applying this update, ensure all previously released errata relevant to your system have been applied. Since no explicit patch details or fixed versions are provided, users should follow the official Red Hat guidance and apply the update as instructed in the Red Hat documentation. Monitor Red Hat's official channels for any further updates or patches.