← Back to CVEs
CVE-2025-9908
MEDIUM6.7
Description
A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers (such as X-Trusted-Proxy and X-Envoy-*) and event stream URLs via crafted requests and job templates. By exfiltrating these headers, an attacker could spoof trusted requests, escalate privileges, or perform malicious event injection.
CVE Details
CVSS v3.1 Score6.7
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
Published2/27/2026
Last Modified2/27/2026
Sourcenvd
Honeypot Sightings0
Weaknesses (CWE)
CWE-200
References
https://access.redhat.com/errata/RHSA-2025:19201(secalert@redhat.com)
https://access.redhat.com/errata/RHSA-2025:19221(secalert@redhat.com)
https://access.redhat.com/errata/RHSA-2025:23069(secalert@redhat.com)
https://access.redhat.com/errata/RHSA-2025:23131(secalert@redhat.com)
https://access.redhat.com/security/cve/CVE-2025-9908(secalert@redhat.com)
https://bugzilla.redhat.com/show_bug.cgi?id=2392835(secalert@redhat.com)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.