CVE-2026-80179: Red Hat Ansible Automation Platform 2

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the JWE.deserialize() function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of service (DoS) for services that process untrusted JWE values.

Affected products

• Red Hat Red Hat Ansible Automation Platform 2
• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat Openshift Ai Rhoai
• Red Hat Red Hat Openstack Platform 16.2

Published 2026-08-28. Last modified 2026-08-31.