CVE-2025-14025 - CVE House
Back to Database
Status published High CVE-2025-14025

Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions

Vulnerability Description

A flaw was found in Ansible Automation Platform (AAP). Read-only scoped OAuth2 API Tokens in AAP, are enforced at the Gateway level for Gateway-specific operations. However, this vulnerability allows read-only tokens to perform write operations on backend services (e.g., Controller, Hub, EDA). If this flaw were exploited, an attacker‘s capabilities would only be limited by role based access controls (RBAC).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14025

Credits & Attribution

No credits recorded in the NVD database.

References

More from Red Hat

View All →
CVE-2025-9909
Aap-gateway: improper path validation in gateway allows credential exfiltration
Medium 6.7
CVE-2025-9908
Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams
Medium 6.7
CVE-2025-9907
Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda
Medium 6.7
CVE-2025-9901
Libsoup: improper handling of http vary header in libsoup caching
Medium 5.9
CVE-2025-9820
Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
Medium 4

Affected Vendor

Affected Software

Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Ansible Automation Platform 2.5, Red Hat Ansible Automation Platform 2.6
Vulnerable Versions:
0:2.5.20260106-1.el8ap, 0:2.5.20260106-1.el9ap, 0:2.6.20260106-1.el9ap, sha256:2df290b61d7aac08deec2973d0a9b98788f6b619e974af0b3f4b61c759c7e464, sha256:766c7570afc4e9b163a3256a0d7c699327905c1d24213229acb0b96a9e65b615

Timeline

Official Publish: January 8th, 2026
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-279

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.