The Red Hat Ansible Automation Platform Execution Environments container images include three notable vulnerabilities: CVE-2024-52304 is a request smuggling vulnerability in the aiohttp library caused by improper parsing of chunk extensions. CVE-2024-56201 and CVE-2024-56326 are sandbox breakout vulnerabilities in the Jinja2 templating engine, exploitable via malicious filenames and indirect references to the format method, respectively. These vulnerabilities could allow an attacker to bypass sandbox restrictions within the execution environment containers. Red Hat has released updated container images to remediate these issues as detailed in advisory RHSA-2025:1101.

Successful exploitation of CVE-2024-52304 could allow an attacker to perform HTTP request smuggling attacks within the affected container environment. The Jinja sandbox breakout vulnerabilities (CVE-2024-56201 and CVE-2024-56326) could enable an attacker to escape sandbox restrictions, potentially leading to unauthorized code execution or information disclosure within the execution environment. These vulnerabilities impact the security boundaries of the Ansible Automation Platform execution containers, potentially affecting automation workflows that rely on these environments.

Red Hat has published updated container images for the Ansible Automation Platform Execution Environments that address these vulnerabilities. Users should update to the latest versions of the ee-minimal-container images as provided in Red Hat advisory RHSA-2025:1101. No additional mitigation steps are specified or required beyond applying these updates. Patch status is confirmed by the vendor advisory.