https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:09:43 +0000 https://cve.radiocsirt.org/vuln/cve-2026-52902 <p><strong>Affected:</strong> Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9, Red Hat Ansible Automation Platform 2</p> <p>A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using &#34;awx --conf.format yaml import&#34;. This is a client-side vulnerability requiring user interaction.</p> <p><strong>Affected:</strong> Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9, Red Hat Ansible Automation Platform 2</p> <p>A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using &#34;awx --conf.format yaml import&#34;. This is a client-side vulnerability requiring user interaction.</p> https://cve.radiocsirt.org/vuln/cve-2026-52902 https://cve.radiocsirt.org/vuln/ghsa-g29c-rgq6-gxgj <p><strong>Affected:</strong> PyPI: awxkit</p> <p>A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using &#34;awx --conf.format yaml import&#34;. This is a client-side vulnerability requiring user interaction.</p> <p><strong>Affected:</strong> PyPI: awxkit</p> <p>A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using &#34;awx --conf.format yaml import&#34;. This is a client-side vulnerability requiring user interaction.</p> https://cve.radiocsirt.org/vuln/ghsa-g29c-rgq6-gxgj