{"schema_version":"1","data":[{"id":16309,"advisory_id":"8349ffea-f431-4e51-a996-887063205509","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-89091","source_published_at":"2026-10-08T21:49:30.953+00:00","published_at":"2026-10-25T01:13:52.869673+00:00","extraction_method":"structured","technologies":["core-cve","migration-toolkit-for-applications-8","migration-toolkit-for-virtualization","openshift-service-mesh-3","red-hat-advanced-cluster-management-for-kubernetes-2","red-hat-ansible-automation-platform-2","red-hat-ansible-automation-platform-ansible-core-2","red-hat-certification-program-for-red-hat-enterprise-linux-9","red-hat-discovery-2","red-hat-enterprise-linux-10","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9","red-hat-openshift-container-platform-4","red-hat-openstack-platform-17-1","red-hat-openstack-platform-18-0","red-hat-satellite-6","red-hat-update-infrastructure-5","self-service-automation-portal-2"],"cve_ids":["CVE-2026-89091"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution","summary":"A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using lexical path normalisation (os.path.abspath) instead of resolving symbolic links (os.path.realpath), and it performs no containment check on symlink-typed directory members before creating them. A crafted collection tarball can chain symlink directory entries so that a subsequent file member is written outside the intended destination directory. This allows an attacker who can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running ansible-galaxy, leading to code execution on the control node. This is a bypass of the fix for CVE-2020-10691.","evidence":"cve:CVE-2026-89091","products":[{"name":{"value":"Migration Toolkit for Applications 8","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Migration Toolkit for Virtualization","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"OpenShift Service Mesh 3","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Advanced Cluster Management for Kubernetes 2","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Advanced Cluster Management for Kubernetes 2","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform 2","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform Ansible Core 2","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform Ansible Core 2","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform Ansible Core 2","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Ansible Automation Platform Ansible Core 2","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Certification Program for Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Discovery 2","evidence":"/containers/cna/affected/60/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/61/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/62/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/63/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenShift Container Platform 4","evidence":"/containers/cna/affected/64/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenStack Platform 17.1","evidence":"/containers/cna/affected/65/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat OpenStack Platform 18.0","evidence":"/containers/cna/affected/66/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Satellite 6","evidence":"/containers/cna/affected/67/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/68/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/69/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/70/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Update Infrastructure 5","evidence":"/containers/cna/affected/71/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Self-service automation portal 2","evidence":"/containers/cna/affected/72/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-89091","aliases":["CVE-2026-89091"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:migration_toolkit_applications:8"],"vendor":"Red Hat","product":"Migration Toolkit for Applications 8","packageName":"mta/mta-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:migration_toolkit_virtualization:2"],"vendor":"Red Hat","product":"Migration Toolkit for Virtualization","packageName":"migration-toolkit-virtualization/mtv-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:service_mesh:3"],"vendor":"Red Hat","product":"OpenShift Service Mesh 3","packageName":"openshift-service-mesh/kiali-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:acm:2"],"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/volsync-operator-bundle","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:acm:2"],"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2","packageName":"rhacm2/volsync-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/de-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/de-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/ee-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/hub-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-24/lightspeed-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/ansible-dev-tools-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/de-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/de-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/eda-controller-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/ee-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/hub-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-25/lightspeed-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/ansible-dev-tools-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/controller-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/de-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/de-supported-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/eda-controller-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/eda-controller-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/ee-supported-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/gateway-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/hub-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/hub-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/lightspeed-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/lightspeed-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/platform-resource-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-26/platform-resource-runner-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/aap-cloud-billing-operator-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/ansible-devspaces-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/ansible-dev-tools-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/controller-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/de-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/de-supported-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/eda-controller-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/eda-controller-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/ee-supported-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/gateway-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/hub-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/hub-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/lightspeed-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/lightspeed-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/metrics-service-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/platform-resource-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-27/platform-resource-runner-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-tech-preview/ansible-devspaces-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-automation-platform-tech-preview/metrics-service-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_core:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","packageName":"ansible-automation-platform/ee-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_core:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","packageName":"ansible-automation-platform/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_core:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","packageName":"ansible-automation-platform-tech-preview/ee-minimal-rhel8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_core:2"],"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","packageName":"ansible-automation-platform-tech-preview/ee-minimal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:certifications:9"],"vendor":"Red Hat","product":"Red Hat Certification Program for Red Hat Enterprise Linux 9","packageName":"rhcertification/redhat-certification-system-ai","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:discovery:2::el9"],"vendor":"Red Hat","product":"Red Hat Discovery 2","packageName":"discovery/discovery-server-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift:4"],"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift4/ose-ansible-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openstack:17.1"],"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","packageName":"openstack-ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openstack:18.0"],"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","packageName":"rhoso-operators/ee-openstack-ansible-ee-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:satellite:6"],"vendor":"Red Hat","product":"Red Hat Satellite 6","packageName":"ansible-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/installer-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/installer-tp-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhui:5::el9"],"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-tp-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:ansible_portal:2"],"vendor":"Red Hat","product":"Self-service automation portal 2","packageName":"ansible-automation-platform/bootc-automation-portal-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-09T15:13:02.773Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2026-89091","https://bugzilla.redhat.com/show_bug.cgi?id=2531646"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-89091","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-09T15:00:00.715697Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-09T15:13:02.773Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-08T21:49:30.953Z"}}},"related_cves":[{"value":"CVE-2026-89091","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":16309,"next_before":16309}