Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.format yaml import". This is a client-side vulnerability requiring user interaction.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-52902 A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a ma… https://www.cve.org/CVERecord?id=CVE-2026-52902
Post summary
The text announces a newly discovered path traversal flaw in awxkit, detailing its technical nature but not providing any PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-52902 Path Traversal in AWXKit YAML Import via Unsanitized File Paths https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-52902
Post summary
A brief notice identifies CVE‑2026‑52902 as a path‑traversal flaw in AWXKit’s YAML import, but offers no details on exploitation, patching, or PoC.