Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update
Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. Update(s) and Fix(es): https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.4/html/red_hat_ansible_automation_platform_release_notes/asynchronous_updates#async-24-20251210
AI Analysis
Technical Summary
Red Hat Ansible Automation Platform 2.6 was found to contain a SQL injection vulnerability in the Django components used by automation-controller and python3.11-django (CVE-2025-64459). This vulnerability could allow an attacker to execute unauthorized SQL commands via crafted input. Red Hat has released an update addressing this issue along with numerous other bug fixes and enhancements. The advisory indicates the update is rated as having an important security impact and is available in the updated packages for the platform components. No CVSS score is provided in the advisory, but the severity is classified as high.
Potential Impact
The SQL injection vulnerability (CVE-2025-64459) in the Django components of the automation-controller could allow an attacker to manipulate backend database queries, potentially leading to unauthorized data access or modification. The advisory classifies the security impact as important (high severity). No known exploits in the wild have been reported at the time of the advisory.
Mitigation Recommendations
Red Hat has released an official security update for Ansible Automation Platform 2.6 that addresses the Django SQL injection vulnerability. Users should apply the provided updates to automation-controller and python3.11-django-ansible-base packages as soon as possible. The advisory does not indicate any additional mitigation steps or temporary workarounds. Patch status is confirmed by the vendor advisory. Users should follow Red Hat's update instructions to remediate this vulnerability.
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update
Description
Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. Update(s) and Fix(es): https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.4/html/red_hat_ansible_automation_platform_release_notes/asynchronous_updates#async-24-20251210
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Ansible Automation Platform 2.6 was found to contain a SQL injection vulnerability in the Django components used by automation-controller and python3.11-django (CVE-2025-64459). This vulnerability could allow an attacker to execute unauthorized SQL commands via crafted input. Red Hat has released an update addressing this issue along with numerous other bug fixes and enhancements. The advisory indicates the update is rated as having an important security impact and is available in the updated packages for the platform components. No CVSS score is provided in the advisory, but the severity is classified as high.
Potential Impact
The SQL injection vulnerability (CVE-2025-64459) in the Django components of the automation-controller could allow an attacker to manipulate backend database queries, potentially leading to unauthorized data access or modification. The advisory classifies the security impact as important (high severity). No known exploits in the wild have been reported at the time of the advisory.
Mitigation Recommendations
Red Hat has released an official security update for Ansible Automation Platform 2.6 that addresses the Django SQL injection vulnerability. Users should apply the provided updates to automation-controller and python3.11-django-ansible-base packages as soon as possible. The advisory does not indicate any additional mitigation steps or temporary workarounds. Patch status is confirmed by the vendor advisory. Users should follow Red Hat's update instructions to remediate this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:23070
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a3da1d94853345fc1828631
Added to database: 06/25/2026, 21:47:05 UTC
Last enriched: 06/25/2026, 22:18:48 UTC
Last updated: 07/04/2026, 08:51:21 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.