Threats tagged 'ghsa-fwqq-57j2-8r7g'

A critical vulnerability (CVE-2026-75884) was found in AWX's container group pod_spec_override field, which uses an incomplete blocklist. This flaw allows an Automation Platform administrator to inject initContainers, override serviceAccountName, and add projected service account token volumes, leading to privilege escalation to OpenShift namespace-level access and potential exfiltration of namespace secrets.