CVE-2025-5988

Medium

Description

A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin checking is not done on requests from the gateway to external components, such as the controller, hub, and eda.

SeverityMedium

CVSS5.3

Exploit probability—

ProductAutomation-gateway-server

PublishedAug 4, 2025

First seenAug 4, 2025

Weakness typeCWE-352Cross-site request forgery (CSRF)

How to fix

Update

automation-gateway-server2.5.20250730 or later

Vendor advisories

access.redhat.com/errata/RHSA-2025:12772

Affected products

Product	Affected versions	Fixed in
automation-gateway-server	v < 2.5.20250730	2.5.20250730
ansible_automation_platform_developer 2.5	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.