live wire
▸PLATFORM · Quay.io push and pull operations hit intermittent 500 errors during maintenanceRed Hat status▸INTEGRATION · Apache Camel exposes incident and web search as parallel tools for a local agentApache Camel▸AI · Red Hat makes confidential GPU AI GA and previews VM-isolated Agent Sandbox (Aug. 4)Red Hat Blog▸SECURITY · Red Hat fixes Important MariaDB GIS memory-corruption flaw in Hardened ImagesRed Hat Product Security▸SECURITY · Red Hat restores CVE pages after a CWE dependency outage; monitoring continuesRed Hat status▸PLATFORM · Red Hat implements a fix for docs.redhat.com degradation and begins monitoringRed Hat status▸AI · vLLM combines PCP, DCP and host-memory offload to serve 1M-token GLM-5.3 contextsvLLM▸AI · vLLM ships day-zero MiniMax-M3.1-Flash support across NVIDIA and AMD GPUsvLLM▸SECURITY · Red Hat revokes compromised eMudhra certificates across RHEL and OpenShift trust storesRed Hat Product Security▸SECURITY · Red Hat rates PHP2Shell request-handling flaws Important; fixes are rolling outRed Hat Product Security▸AI · IBM maps GPU observability and FinOps controls across OpenShift clustersIBM Community▸IDENTITY · Red Hat shows Data Grid authentication through Keycloak 26 on OpenShiftRed Hat Developer▸AI · Red Hat layers tenant isolation, tool authorization and rate limits onto MCP gatewaysRed Hat Developer▸DATA · Red Hat maps direct LDAP and LDAPS authentication for Data Grid on OpenShiftRed Hat Developer▸PLATFORM · Quay.io push and pull operations hit intermittent 500 errors during maintenanceRed Hat status▸INTEGRATION · Apache Camel exposes incident and web search as parallel tools for a local agentApache Camel▸AI · Red Hat makes confidential GPU AI GA and previews VM-isolated Agent Sandbox (Aug. 4)Red Hat Blog▸SECURITY · Red Hat fixes Important MariaDB GIS memory-corruption flaw in Hardened ImagesRed Hat Product Security▸SECURITY · Red Hat restores CVE pages after a CWE dependency outage; monitoring continuesRed Hat status▸PLATFORM · Red Hat implements a fix for docs.redhat.com degradation and begins monitoringRed Hat status▸AI · vLLM combines PCP, DCP and host-memory offload to serve 1M-token GLM-5.3 contextsvLLM▸AI · vLLM ships day-zero MiniMax-M3.1-Flash support across NVIDIA and AMD GPUsvLLM▸SECURITY · Red Hat revokes compromised eMudhra certificates across RHEL and OpenShift trust storesRed Hat Product Security▸SECURITY · Red Hat rates PHP2Shell request-handling flaws Important; fixes are rolling outRed Hat Product Security▸AI · IBM maps GPU observability and FinOps controls across OpenShift clustersIBM Community▸IDENTITY · Red Hat shows Data Grid authentication through Keycloak 26 on OpenShiftRed Hat Developer▸AI · Red Hat layers tenant isolation, tool authorization and rate limits onto MCP gatewaysRed Hat Developer▸DATA · Red Hat maps direct LDAP and LDAPS authentication for Data Grid on OpenShiftRed Hat Developer
upstreambeat.ai
newsPLATFORM

AAP 2.7-8 closes critical GitPython and Vault paths across controller and hub

The September patch maps Git command-injection and Kubernetes token-exfiltration fixes to specific Ansible Automation Platform components and operator builds.

Compare controller and hub fixes across AAP 2.7-8.
Side by side: what changed
By The News Desk· Sep 20, 2026the quick take — two AI hosts go live when you do

Red Hat’s Ansible Automation Platform 2.7-8 update is not a single-library refresh. The September 14 release notes place the most consequential fixes in Automation Controller and Automation Hub, while a separate Vault credential fix lands in Controller.

What changed

The update ships Automation Controller 4.8.8, Automation Hub 4.12.6, Event-Driven Ansible 1.3.10 and Receptor 1.6.8. For OpenShift installations, Red Hat lists new namespace- and cluster-scoped AAP Operator builds under the 2.7.0 channel.

Controller and Hub both receive a broad GitPython repair set covering unsafe clone options, command injection, malicious Git templates, environment-variable exposure and arbitrary file operations. Controller moves to GitPython 3.1.59; Hub receives 3.1.57 or later. The release notes attach the remote-code and command-execution fixes to the controller-rhel9 and hub-rhel9 images rather than every AAP service.

Controller also fixes CVE-2026-12564 in the HashiCorp Vault credential plugin. Red Hat says the flaw could expose a Kubernetes service-account token through server-side request forgery. The corrected path obtains short-lived, audience-scoped credentials through Kubernetes’ TokenRequest API.

Who needs to act

Teams running Automation Controller or private Automation Hub should treat 2.7-8 as the upgrade target when project synchronization or other workflows consume Git URLs or options that are not fully controlled by administrators. Clusters using the Vault credential plugin have a second reason to prioritize Controller 4.8.8, because that component contains the token-exfiltration fix.

The operator update also creates runtime NetworkPolicy resources for Controller, Hub, Event-Driven Ansible, Lightspeed, the platform gateway, the resource operator and the metrics service. That is a useful containment change, but it does not replace the patched application images.

Upgrade check

Operators should verify that the resulting deployment reports Controller 4.8.8 and Hub 4.12.6, and that the installed AAP Operator build matches one of the two builds Red Hat lists for 2.7-8. Environments that use the containerized installer should move to bundle or online installer 2.7-8.

After the update, test source-control project synchronization and any Controller credentials backed by HashiCorp Vault. For OpenShift deployments, inspect the generated NetworkPolicy objects before assuming existing cross-namespace integrations will continue to reach AAP pods. The release contains many lower-severity dependency fixes, but the practical upgrade decision rests on whether Controller, Hub and the Vault credential path are present.

sources

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk