CVE-2026-92982Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
Updated under an hour ago ()
Does this affect you?
It affects Red Hat Migration Toolkit for Applications 8 and 9 other products. Add what you run to find out whether that includes you.
EPSS puts the chance of exploitation in the next 30 days at 0.39%, higher than 31% of scored CVEs.
Do this next
Free account, 1 product
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressions to be executed within the operator pod. This can lead to arbitrary code execution and privilege escalation, granting the attacker control over the operator's service account with cluster-wide permissions.
- CVSS
- 8.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weakness (CWE)
- CWE-1336
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- 0.39% (percentile 31)
- Assigned by
- redhat
- NVD analysis
- Awaiting Analysis
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Red Hat Migration Toolkit for Applications 8 redhat:migration_toolkit_applications | 8 | CNA record |
Red Hat Migration Toolkit for Containers redhat:rhmt | 1 | CNA record |
Red Hat Migration Toolkit for Virtualization redhat:migration_toolkit_virtualization | 2 | CNA record |
Red Hat OpenShift Service Mesh 3 redhat:service_mesh | 3 | CNA record |
2 | CNA record | |
Red Hat Red Hat Ansible Automation Platform 2 redhat:ansible_automation_platform | 2 | CNA record |
Red Hat Red Hat OpenShift Container Platform 4 redhat:openshift | 4 | CNA record |
Red Hat Red Hat OpenShift Virtualization 4 redhat:container_native_virtualization | 4 | CNA record |
Red Hat Red Hat OpenStack Platform 16.2 redhat:openstack | 16.2 | CNA record |
Red Hat Service Telemetry Framework 1.5 redhat:stf | 1.5 | CNA record |
References
- https://access.redhat.com/security/cve/CVE-2026-92982vdb-entry, x-refsource-redhat
- https://bugzilla.redhat.com/show_bug.cgi?id=2522227issue-tracking, x-refsource-redhat
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.