VYPR

Awx Operator

by Ansible

Source repositories

CVEs (1)

  • CVE-2026-11807CriJun 23, 2026
    risk 0.62cvss 9.6epss 0.00

    A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messages. Any authenticated user can send a forged message with an arbitrary…