CVE-2026-52902

Name of the Vulnerable Software and Affected Versions awxkit (affected versions not specified)

Description A path traversal issue exists in the CLI tool for AWX. The YAML !include directive fails to sanitize file paths, which allows an attacker to create a malicious YAML file. When a user imports this file using the command "awx --conf.format yaml import", the tool can be forced to read arbitrary YAML-formatted files from the local filesystem. This is a client-side issue that requires user interaction to be triggered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.