Search: CVE-2026-75884

CVE-2026-75884 is a critical vulnerability in Red Hat Ansible Automation Platform 2.4 for RHEL 8 involving an incomplete blocklist in the AWX controller's container group pod_spec_override field. This flaw allows an AAP platform administrator to inject unauthorized pod specifications such as initContainers and serviceAccountName overrides, leading to privilege escalation to OpenShift namespace-level access and exfiltration of namespace secrets. Containerized (Podman) installations are not affected. No effective mitigation or patch currently meets Red Hat's criteria for widespread deployment and stability.