Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
A security vulnerability (CVE-2025-2877) in Red Hat Ansible Automation Platform 2.4's ansible-rulebook component exposes inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in Event-Driven Ansible (EDA). This issue has been addressed by updating ansible-rulebook to version 1.0.8 and automation-controller to version 4.5.21. The vulnerability is rated as high severity by Red Hat Product Security.
AI Analysis
Technical Summary
Red Hat Ansible Automation Platform 2.4 contains a vulnerability (CVE-2025-2877) in the ansible-rulebook component where inventory passwords are exposed in plain text during rulebook activation if verbosity is set to debug in Event-Driven Ansible. This exposure could lead to unauthorized disclosure of sensitive credentials. Red Hat has released updates to ansible-rulebook (1.0.8) and automation-controller (4.5.21) to fix this issue. The advisory rates the security impact as Important (high).
Potential Impact
The vulnerability allows exposure of inventory passwords in plain text under specific conditions (debug verbosity during rulebook activation), potentially leading to credential disclosure within affected environments. This could compromise automation tasks and related systems that rely on these credentials.
Mitigation Recommendations
Red Hat has provided an official fix by updating ansible-rulebook to version 1.0.8 and automation-controller to version 4.5.21. Users of Red Hat Ansible Automation Platform 2.4 should apply these updates promptly to remediate the vulnerability. No additional mitigations are specified beyond applying the official patches.
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Description
A security vulnerability (CVE-2025-2877) in Red Hat Ansible Automation Platform 2.4's ansible-rulebook component exposes inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in Event-Driven Ansible (EDA). This issue has been addressed by updating ansible-rulebook to version 1.0.8 and automation-controller to version 4.5.21. The vulnerability is rated as high severity by Red Hat Product Security.
Affected software
pkg:rpm/redhat/ansible-automation-platformRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Ansible Automation Platform 2.4 contains a vulnerability (CVE-2025-2877) in the ansible-rulebook component where inventory passwords are exposed in plain text during rulebook activation if verbosity is set to debug in Event-Driven Ansible. This exposure could lead to unauthorized disclosure of sensitive credentials. Red Hat has released updates to ansible-rulebook (1.0.8) and automation-controller (4.5.21) to fix this issue. The advisory rates the security impact as Important (high).
Potential Impact
The vulnerability allows exposure of inventory passwords in plain text under specific conditions (debug verbosity during rulebook activation), potentially leading to credential disclosure within affected environments. This could compromise automation tasks and related systems that rely on these credentials.
Mitigation Recommendations
Red Hat has provided an official fix by updating ansible-rulebook to version 1.0.8 and automation-controller to version 4.5.21. Users of Red Hat Ansible Automation Platform 2.4 should apply these updates promptly to remediate the vulnerability. No additional mitigations are specified beyond applying the official patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:3636
- Cve Count
- 1
Threat ID: 6a3da1d54853345fc1826e89
Added to database: 06/25/2026, 21:47:01 UTC
Last enriched: 06/25/2026, 22:14:53 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 24
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.