The Red Hat Ansible Automation Platform Execution Environments container images, specifically the ee-minimal-container, are affected by three distinct vulnerabilities: CVE-2024-52304 is a request smuggling vulnerability in the aiohttp library caused by incorrect parsing of chunk extensions. CVE-2024-56201 and CVE-2024-56326 are sandbox breakout vulnerabilities in the Jinja2 templating engine, exploitable via malicious filenames and indirect references to the format method, respectively. These vulnerabilities could compromise the sandboxing mechanisms intended to isolate code execution within the container environment. Red Hat has released updated container images as part of RHSA-2025:0753 to remediate these issues.

Successful exploitation of these vulnerabilities could allow an attacker to bypass sandbox restrictions within the Ansible Automation Platform Execution Environments container, potentially leading to unauthorized code execution or manipulation of automation tasks. The request smuggling vulnerability in aiohttp could also affect HTTP request handling within the container. The advisory does not report known exploits in the wild. The vulnerabilities are rated with high severity by Red Hat.

Red Hat has released updated container images for the Ansible Automation Platform Execution Environments that address these vulnerabilities. Users should apply the updates as per the Red Hat Security Advisory RHSA-2025:0753 by pulling the latest patched container images. No additional mitigation steps are indicated or required beyond applying these official updates.