CVE-2026-0598: Red Hat Ansible Automation Platform 2

Medium severity, CVSS 4.2. EPSS: 0.3% chance of exploitation in the next 30 days.

A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions. The APIs do not properly verify whether a conversation identifier belongs to the authenticated user making the request. As a result, an attacker with valid credentials could access or influence conversations owned by other users. This exposes sensitive conversation data and allows unauthorized manipulation of AI-generated outputs.

Affected products

• Red Hat Red Hat Ansible Automation Platform 2
• Red Hat Red Hat Ansible Automation Platform 2.6: before 1777387242 (fixed in 1777387242)

Published 2026-02-06. Last modified 2026-06-17.