CERT24CVE-2025-49520 — Event-driven-ansible: authenticated argument injection in Git URL during EDA project creationLoading data…
CERT24Threat Observatory
Period

CVE-2025-49520 — Event-driven-ansible: authenticated argument injection in Git URL during EDA project creation

In the EDA component of Ansible Automation Platform, user-supplied Git URLs are passed unsanitized to the git ls-remote command. This allows an authenticated attacker to inject arguments and execute arbitrary commands on the EDA worker. In Kubernetes/OpenShift environments, this may lead to service account token theft and cluster access.

← Back to intelligence

CVE-2025-49520 — Event-driven-ansible: authenticated argument injection in Git URL during EDA project creation

In the EDA component of Ansible Automation Platform, user-supplied Git URLs are passed unsanitized to the git ls-remote command. This allows an authenticated attacker to inject arguments and execute arbitrary commands on the EDA worker. In Kubernetes/OpenShift environments, this may lead to service account token theft and cluster access.