https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:21:53.270659+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-52902 CVE-2026-52902 — Awxkit: path traversal via yaml !include directive 2026-10-03T01:21:53.279033+00:00

Affected: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9, Red Hat Ansible Automation Platform 2

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.format yaml import". This is a client-side vulnerability requiring user interaction.

 https://cve.radiocsirt.org/vuln/ghsa-g29c-rgq6-gxgj GHSA-g29c-rgq6-gxgj — awxkit has a path traversal vulnerability 2026-10-03T01:21:53.279094+00:00

Affected: PyPI: awxkit

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.format yaml import". This is a client-side vulnerability requiring user interaction.