Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update
Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. Security Fix(es): * ee-minimal-container: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions (CVE-2024-52304) * ee-minimal-container: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201) * ee-minimal-container: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)
AI Analysis
Technical Summary
This advisory covers three vulnerabilities in Red Hat Ansible Automation Platform Execution Environments containers: CVE-2024-52304 is a request smuggling vulnerability in aiohttp caused by incorrect parsing of chunk extensions. CVE-2024-56201 and CVE-2024-56326 are sandbox breakout vulnerabilities in the Jinja templating engine, exploitable via malicious filenames or indirect references to the format method. These issues affect the ee-minimal-container images used in the platform. The advisory provides updated container images to remediate these flaws.
Potential Impact
Successful exploitation of CVE-2024-52304 could allow HTTP request smuggling attacks within the container environment, potentially leading to unauthorized request handling. The Jinja sandbox breakout vulnerabilities (CVE-2024-56201 and CVE-2024-56326) could enable attackers to escape the sandbox restrictions, possibly executing arbitrary code or accessing restricted data within the container. These vulnerabilities impact the security isolation and integrity of automation execution environments.
Mitigation Recommendations
Red Hat has released updated container images for the Ansible Automation Platform Execution Environments that address these vulnerabilities. Users should apply the updates provided in Red Hat Security Advisory RHSA-2025:1101 to remediate these issues. No additional mitigation steps are indicated beyond applying the official updates.
Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update
Description
Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. Security Fix(es): * ee-minimal-container: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions (CVE-2024-52304) * ee-minimal-container: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201) * ee-minimal-container: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers three vulnerabilities in Red Hat Ansible Automation Platform Execution Environments containers: CVE-2024-52304 is a request smuggling vulnerability in aiohttp caused by incorrect parsing of chunk extensions. CVE-2024-56201 and CVE-2024-56326 are sandbox breakout vulnerabilities in the Jinja templating engine, exploitable via malicious filenames or indirect references to the format method. These issues affect the ee-minimal-container images used in the platform. The advisory provides updated container images to remediate these flaws.
Potential Impact
Successful exploitation of CVE-2024-52304 could allow HTTP request smuggling attacks within the container environment, potentially leading to unauthorized request handling. The Jinja sandbox breakout vulnerabilities (CVE-2024-56201 and CVE-2024-56326) could enable attackers to escape the sandbox restrictions, possibly executing arbitrary code or accessing restricted data within the container. These vulnerabilities impact the security isolation and integrity of automation execution environments.
Mitigation Recommendations
Red Hat has released updated container images for the Ansible Automation Platform Execution Environments that address these vulnerabilities. Users should apply the updates provided in Red Hat Security Advisory RHSA-2025:1101 to remediate these issues. No additional mitigation steps are indicated beyond applying the official updates.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:1101
- Cve Count
- 3
- Additional Cves
- ["CVE-2024-56201","CVE-2024-56326"]
Threat ID: 6a1f4e97e29bf47b5008629b
Added to database: 06/02/2026, 21:43:51 UTC
Last enriched: 08/11/2026, 20:41:19 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 67
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.