Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update
Red Hat Ansible Automation Platform 2.5 Container Release Update addresses multiple security vulnerabilities including an XXE vulnerability in langchain-text-splitters, insecure temporary file handling in llama_index, potential directory traversal via archive extraction, and potential SQL injection in Django QuerySet methods on MySQL and MariaDB. These vulnerabilities affect components within the lightspeed-container and lightspeed-chatbot-container. The update also includes various bug fixes and collection updates to improve stability and functionality.
AI Analysis
Technical Summary
This advisory covers four security vulnerabilities in Red Hat Ansible Automation Platform 2.5 containers: CVE-2025-6985 (XXE vulnerability in langchain-text-splitters), CVE-2025-7647 (insecure temporary file handling in run-llama/llama_index), CVE-2025-59682 (potential partial directory traversal via archive.extract()), and CVE-2025-59681 (potential SQL injection in Django QuerySet methods on MySQL and MariaDB). The advisory includes updates to the ansible.controller collection and fixes for installation and API data gathering issues. These vulnerabilities impact components related to automation content processing and container operations within the platform.
Potential Impact
The vulnerabilities could allow an attacker to exploit XML External Entity processing (XXE), insecure temporary file handling, directory traversal, and SQL injection within the affected containers. This may lead to unauthorized access to sensitive data, execution of arbitrary code, or manipulation of database queries. The advisory rates the severity as high, indicating significant potential impact if exploited.
Mitigation Recommendations
Red Hat has issued an updated container release for Ansible Automation Platform 2.5 that addresses these vulnerabilities. Users should apply the Red Hat Ansible Automation Platform 2.5 container update as provided in advisory RHSA-2025:18984. The update includes fixes for the identified security issues and additional bug fixes. There is no indication that no action is required; therefore, applying the official update is recommended to remediate these vulnerabilities.
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update
Description
Red Hat Ansible Automation Platform 2.5 Container Release Update addresses multiple security vulnerabilities including an XXE vulnerability in langchain-text-splitters, insecure temporary file handling in llama_index, potential directory traversal via archive extraction, and potential SQL injection in Django QuerySet methods on MySQL and MariaDB. These vulnerabilities affect components within the lightspeed-container and lightspeed-chatbot-container. The update also includes various bug fixes and collection updates to improve stability and functionality.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers four security vulnerabilities in Red Hat Ansible Automation Platform 2.5 containers: CVE-2025-6985 (XXE vulnerability in langchain-text-splitters), CVE-2025-7647 (insecure temporary file handling in run-llama/llama_index), CVE-2025-59682 (potential partial directory traversal via archive.extract()), and CVE-2025-59681 (potential SQL injection in Django QuerySet methods on MySQL and MariaDB). The advisory includes updates to the ansible.controller collection and fixes for installation and API data gathering issues. These vulnerabilities impact components related to automation content processing and container operations within the platform.
Potential Impact
The vulnerabilities could allow an attacker to exploit XML External Entity processing (XXE), insecure temporary file handling, directory traversal, and SQL injection within the affected containers. This may lead to unauthorized access to sensitive data, execution of arbitrary code, or manipulation of database queries. The advisory rates the severity as high, indicating significant potential impact if exploited.
Mitigation Recommendations
Red Hat has issued an updated container release for Ansible Automation Platform 2.5 that addresses these vulnerabilities. Users should apply the Red Hat Ansible Automation Platform 2.5 container update as provided in advisory RHSA-2025:18984. The update includes fixes for the identified security issues and additional bug fixes. There is no indication that no action is required; therefore, applying the official update is recommended to remediate these vulnerabilities.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:18984
- Cve Count
- 4
- Additional Cves
- ["CVE-2025-7647","CVE-2025-59681","CVE-2025-59682"]
- Cvss Version
- null
Threat ID: 6a419cb027e9c79719abb0bc
Added to database: 06/28/2026, 22:14:08 UTC
Last enriched: 06/28/2026, 22:25:30 UTC
Last updated: 07/03/2026, 20:51:25 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.