Skip to content
Advisories.
red-hatCVE-2026-75884

A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers,...

Critical9.1CVE-2026-75884 · Published Sep 23, 2026 · updated Sep 24, 2026

Source advisory

Affected versions

PackageAffectedFixed in
Details and references

A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can exploit this to escalate privileges to OpenShift namespace-level access and exfiltrate namespace secrets.

CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity from
no source yet
Weakness
CWE-184

More red-hat advisories

All
DateAdvisory
Sep 22A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svc_rdma_sendto.c.
CVE-2026-13087High8.8no fix yet
Sep 22A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests.
CVE-2026-94640High7.5no fix yet
Sep 22A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the LDAP ppolicy access check can occur if a...
CVE-2026-90462Medium5.4no fix yet
Sep 22A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library.
CVE-2026-95619High7.7no fix yet
Sep 23A code execution flaw was found in Emacs, affecting versions prior to 31.2.
CVE-2026-96442High7.8fixed in GNU Emacs 31.2
Sep 23A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution.
CVE-2026-96445Medium6.8no fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.