What is CVE-2026-44192?

CVE-2026-44192 is a medium-severity vulnerability in Red Hat Ansible Automation Platform 2, classified under Path Traversal. CVSS score: 6.6/10. Published 2026-07-22.

How severe is CVE-2026-44192?

Medium severity. CVSS v3 base score is 6.6 out of 10.

Path Traversal in Red Hat Ansible Automation Platform 2

CVE-2026-44192

A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can caus…

Vulnerability class: Path Traversal (Directory Traversal)

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L.

Affected products

Red Hat Ansible Automation Platform 2

Weakness classification (CWE)

CWE-22 — Path Traversal

References

secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking)

Frequently asked questions

What is CVE-2026-44192?: CVE-2026-44192 is a medium-severity vulnerability in Red Hat Ansible Automation Platform 2, classified under Path Traversal. CVSS score: 6.6/10. Published 2026-07-22.
How severe is CVE-2026-44192?: Medium severity. CVSS v3 base score is 6.6 out of 10.