Ansible Automation Platform patch release January 6, 2026

The following release notes detail the updates for the Ansible Automation Platform patch released on January 6, 2026.

This release includes the following components and versions:

Expand
Release Date Component versions

January 6, 2026
  • Automation controller 4.7.6
  • Automation hub 4.11.4
  • Event-Driven Ansible 1.2.3
  • Container-based installer Ansible Automation Platform (bundle) 2.6-4.1
  • Container-based installer Ansible Automation Platform (online) 2.6-4
  • Receptor 1.6.2
  • RPM-based installer Ansible Automation Platform (bundle) 2.6-3.2
  • RPM-based installer Ansible Automation Platform (online) 2.6-3

CSV Versions in this release:

  • Namespace: aap-operator.v2.6.0-0.1767630689
  • Cluster: aap-operator.v2.6.0-0.1767630627

CVE
Copy link

With this update, the following CVEs have been addressed:

  • CVE-2025-14025automation-gateway: Read-only Personal Access Token (PAT) bypasses write restrictions.(AAP-60068)
  • CVE-2025-68664ansible-automation-platform-26/lightspeed-rhel9: LangChain: Arbitrary code execution via serialization injection.(AAP-61313)