PT-2025-54838 · Red Hat · Red Hat Ansible Automation Platform+1

Elijah Delee · Published 2026-02-27 · Updated 2026-02-27 · CVE-2025-9908

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams (affected versions not specified)

Description A flaw exists in Event-Driven Ansible (EDA) Event Streams that allows an authenticated user to access sensitive internal infrastructure headers, such as X-Trusted-Proxy and X-Envoy-*, and event stream URLs through specially crafted requests and job templates. An attacker could potentially exploit this by exfiltrating these headers to spoof trusted requests, escalate privileges, or inject malicious events. The vulnerability involves the manipulation of requests and job templates to reveal internal information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-9908

RHSA-2025:23069

Affected Products

Event-Driven Ansible (Eda) Event Streams

Red Hat Ansible Automation Platform

References · 11

• https://access.redhat.com/errata/RHSA-2025:23131 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2025-9908 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:19201 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:23069 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9908 · Security Note
• https://access.redhat.com/errata/RHSA-2025:19221 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2392835 · Vendor Advisory
• https://t.me/cveNotify/153439 · Telegram Post
• https://twitter.com/CVEnew/status/2027380183255196158 · Twitter Post
• https://t.me/CVEtracker/45953 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2027433744596963662 · Twitter Post