Ansible API Unauthenticated Verbose Data Exposure
CVE-2025-53862 Published on July 11, 2025
Aap: aap-gateway: automation-hub: sensitive information disclosure
A flaw was found in Ansible. Three API endpoints are accessible and return verbose, unauthenticated responses. This flaw allows a malicious user to access data that may contain important information.
Vulnerability Analysis
Timeline
Reported to Red Hat.
Made public.
Weakness Type
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The application does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the application does.
Products Associated with CVE-2025-53862
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2025-53862 are published in these products:
Affected Versions
Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2:Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.