CVE-2025-9907

CVE-2025-9907 is a medium-severity vulnerability in the Red Hat Ansible Automation Platform's Event-Driven Ansible (EDA) Event Stream API. This flaw allows for the exposure of sensitive client credentials and internal infrastructure headers when an event stream is in test mode. The vulnerability carries a CVSS score of 6.7 (MEDIUM) and could lead to leakage of internal infrastructure details, accidental disclosure of user or system credentials, and potential privilege escalation. There is currently no known active exploitation, public exploit code, or significant media coverage, though it has garnered minimal community discussion.