CVE-2025-9909

CVE-2025-9909 describes a flaw in the Red Hat Ansible Automation Platform Gateway's route creation component, allowing credential theft. By using a double-slash (//) prefix in the gateway_path, a malicious administrator can create misleading routes to intercept user credentials. This vulnerability has a CVSS score of 6.7 (Medium), indicating a local attack vector with high impact on confidentiality, integrity, and availability, requiring high privileges but no user interaction. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, though it has received one community mention.