CVE-2021-4112: Red Hat Ansible Automation Platform

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

Affected products

• Red Hat Ansible Automation Platform: version 2.0 only; version 2.1 only
• Red Hat Ansible Automation Platform Early Access: version 2.0 only
• Red Hat Ansible Automation Platform Text-Only Advisories: affected versions not specified
• Red Hat Ansible Tower: version 3.0 only

Published 2022-08-25. Last modified 2026-06-17.