CVE-2026-75884

Name of the Vulnerable Software and Affected Versions AWX (affected versions not specified)

Description A flaw exists in the container group pod spec override field due to an incomplete blocklist that only restricts automountServiceAccountToken. This allows the injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can exploit this to escalate privileges to OpenShift namespace-level access and exfiltrate namespace secrets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.