Skip to content

CVE-2026-92982

CVE.org · Published

Historical CVEs JSON AI instructions

Record status: Published
Identifier year (not publication year): 2026
Source publication: Oct 15, 2026
Source updated: Oct 21, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection

A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressions to be executed within the operator pod. This can lead to arbitrary code execution and privilege escalation, granting the attacker control over the operator's service account with cluster-wide permissions.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Red Hat Ansible Automation Platform 2.6

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2.6
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-26/lightspeed-rhel9-operator
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Ansible Automation Platform 2.6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791840864	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Ansible Automation Platform 2.7

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2.7
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-27/lightspeed-rhel9-operator
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Ansible Automation Platform 2.7 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1792138238	`unaffected`	rpm	*	Unavailable	None listed

Migration Toolkit for Applications 8

Vendor: Red Hat
Product: Migration Toolkit for Applications 8
Platforms: Unknown
Default status: affected
Package: mta/mta-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Migration Toolkit for Containers

Vendor: Red Hat
Product: Migration Toolkit for Containers
Platforms: Unknown
Default status: affected
Package: rhmtc/openshift-migration-rhel8-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Migration Toolkit for Virtualization

Vendor: Red Hat
Product: Migration Toolkit for Virtualization
Platforms: Unknown
Default status: affected
Package: migration-toolkit-virtualization/mtv-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

OpenShift Service Mesh 3

Vendor: Red Hat
Product: OpenShift Service Mesh 3
Platforms: Unknown
Default status: affected
Package: openshift-service-mesh/kiali-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Advanced Cluster Management for Kubernetes 2

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2
Platforms: Unknown
Default status: unaffected
Package: rhacm2/submariner-operator-bundle
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Advanced Cluster Management for Kubernetes 2

Vendor: Red Hat
Product: Red Hat Advanced Cluster Management for Kubernetes 2
Platforms: Unknown
Default status: unaffected
Package: rhacm2/submariner-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-26/aap-cloud-billing-rhel8-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-26/controller-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-26/eda-controller-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-26/gateway-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-26/hub-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-26/platform-resource-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-27/aap-cloud-billing-operator-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-27/controller-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-27/eda-controller-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-27/gateway-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-27/hub-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-27/metrics-service-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-27/platform-resource-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Ansible Automation Platform 2

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform-tech-preview/metrics-service-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift Container Platform 4

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4
Platforms: Unknown
Default status: affected
Package: openshift4/ose-ansible-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift Container Platform 4

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4
Platforms: Unknown
Default status: unaffected
Package: openshift4/ose-helm-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift Container Platform 4

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4
Platforms: Unknown
Default status: affected
Package: openshift4/ose-operator-sdk-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift Virtualization 4

Vendor: Red Hat
Product: Red Hat OpenShift Virtualization 4
Platforms: Unknown
Default status: unaffected
Package: container-native-virtualization/cluster-network-addons-operator-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenStack Platform 16.2

Vendor: Red Hat
Product: Red Hat OpenStack Platform 16.2
Platforms: Unknown
Default status: affected
Package: rhosp-rhel8/osp-director-operator-bundle
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenStack Platform 17.1

Vendor: Red Hat
Product: Red Hat OpenStack Platform 17.1
Platforms: Unknown
Default status: affected
Package: rhosp-rhel9/osp-director-operator-bundle
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenStack Platform 18.0

Vendor: Red Hat
Product: Red Hat OpenStack Platform 18.0
Platforms: Unknown
Default status: affected
Package: rhoso-operators/openstack-operator-bundle
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Service Telemetry Framework 1.5

Vendor: Red Hat
Product: Service Telemetry Framework 1.5
Platforms: Unknown
Default status: unaffected
Package: stf/service-telemetry-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Service Telemetry Framework 1.5

Vendor: Red Hat
Product: Service Telemetry Framework 1.5
Platforms: Unknown
Default status: affected
Package: stf/smart-gateway-rhel9-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.