The Red Hat Ansible Automation Platform Execution Environments container images include three notable security flaws. CVE-2024-52304 involves aiohttp being vulnerable to HTTP request smuggling attacks due to improper parsing of chunk extensions. CVE-2024-56201 and CVE-2024-56326 are sandbox breakout vulnerabilities in the Jinja templating engine, exploitable via malicious filenames and indirect references to the format method, respectively. These vulnerabilities could allow an attacker to bypass sandbox restrictions within the container environment. Red Hat has released updated container images to remediate these issues as part of advisory RHSA-2025:0753.

Successful exploitation of CVE-2024-52304 could allow an attacker to perform HTTP request smuggling attacks, potentially interfering with request handling. The Jinja sandbox breakout vulnerabilities (CVE-2024-56201 and CVE-2024-56326) could enable an attacker to escape sandbox restrictions, potentially leading to unauthorized code execution or privilege escalation within the execution environment container. These vulnerabilities affect the security boundaries of automation tasks run within the Ansible Automation Platform Execution Environments.

Red Hat has released updated container images for the Ansible Automation Platform Execution Environments that address these vulnerabilities. Users should apply the updates provided in Red Hat Security Advisory RHSA-2025:0753 to remediate these issues. Patch status is confirmed by the vendor advisory. No additional mitigation steps are specified beyond applying the updated container releases.