Search: CVE-2026-71364

CVE-2026-71364 is a path traversal vulnerability in Red Hat Ansible Automation Platform 2.5 for RHEL 8. The vulnerability occurs in the project_archive action plugin, which extracts archive members without proper path normalization or boundary validation. This allows an attacker controlling the archive content to write files outside the intended directory, potentially leading to arbitrary file writes and remote code execution. Red Hat has issued an important security advisory with a patch to address this issue.