Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2026-0598

Ansible-lightspeed: broken object level authorization leading to cross-user ai conversation context injection in ansible lightspeed api

Description

A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions. The APIs do not properly verify whether a conversation identifier belongs to the authenticated user making the request. As a result, an attacker with valid credentials could access or influence conversations owned by other users. This exposes sensitive conversation data and allows unauthorized manipulation of AI-generated outputs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Ansible Automation Platform 2.6

Default version status: affected

  • 1777387242 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

References