SSRF in Red Hat Ansible Automation Platform 2
CVE-2026-79717
A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions can set a namespace avatar URL to an arbitrary address, including internal networks, loopback, or cloud instance metadata endpoints. A background worker fetches that URL without checking the destination, which lets the attacker probe internal services and enumerate reachable IP addresses. The HTTP client is also configured without an overall timeout, so a slow or non-responsive target can pin workers and cause a denial of service.
Vulnerability class: SSRF (Server-Side Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L.
EPSS exploit prediction
EPSS: 0.004 (29.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 29th percentile — 29.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.004 · change: +0.002
Affected products
Weakness classification (CWE)
References
- access.redhat.com/security/cve/CVE-2026-79717 (vdb-entry)
- bugzilla.redhat.com/show_bug.cgi (issue-tracking)
- github.com/ansible/galaxy_ng
Frequently asked questions
- What is CVE-2026-79717?
- CVE-2026-79717 is a medium-severity vulnerability in Red Hat Ansible Automation Platform 2, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.4/10. Published 2026-08-25.
- How severe is CVE-2026-79717?
- Medium severity. CVSS v3 base score is 6.4 out of 10.