CVE-2025-9909
published 2026-02-27CVE-2025-9909: A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of…
PriorityP432medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.17%
6.3th percentile
A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | ansible_automation_platform | < 2.6 | 2.6 |
| redhat | ansible_developer | — | — |
| redhat | ansible_developer | — | — |
| redhat | ansible_inside | — | — |
| redhat | ansible_inside | — | — |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vendor_redhat6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2fx4-vwf2-pw99: A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component
ghsa_unreviewed·2026-02-27
CVE-2025-9909 [MEDIUM] CWE-647 GHSA-2fx4-vwf2-pw99: A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component
A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.
Red Hat
aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration
vendor_redhat·2025-09-17·CVSS 6.7
CVE-2025-9909 [MEDIUM] CWE-647 aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration
aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration
A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.
A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially en
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-02-27
Published