CVE-2025-69223

HIGH

7.5

CVSS v3

Description

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.

CWE-409 CWE-770Allocation of Resources Without Limits or Throttling

How to fix

Remediation Available

python-aiohttpDebian

Fixed in:3.11.16-1+deb13u1CVE-2025-69223

Fixed in:3.13.3-1CVE-2025-69223

aap-metrics-utilityRocky

Fixed in:0:0.6.0-2.1.el8apRHSA-2026:3959

Fixed in:0:0.6.1-3.1.el9apRHSA-2026:3958

Fixed in:0:0.6.0-2.1.el9apRHSA-2026:3959

Fixed in:0:0.6.1-3.1.el9apRHSA-2026:3958

aap-metrics-utilityRed Hat / RHEL

Fixed in:0:0.6.0-2.1.el8apRHSA-2026:3959

Fixed in:0:0.6.0-2.1.el9apRHSA-2026:3959

Fixed in:0:0.6.1-3.1.el9apRHSA-2026:3958

ansible-automation-platform-installerRed Hat / RHEL

Fixed in:0:2.5-21.el8apRHSA-2026:3959

Fixed in:0:2.6-4.el9apRHSA-2026:1249

Fixed in:0:2.6-5.el9apRHSA-2026:3958

Fixed in:0:2.5-21.el9apRHSA-2026:3959

Fixed in:0:2.6-5.el9apRHSA-2026:3958

Fixed in:0:2.5-21.el9apRHSA-2026:3959

Fixed in:0:2.6-4.el9apRHSA-2026:1249

ansible-automation-platform-installerRocky

Fixed in:0:2.5-21.el8apRHSA-2026:3959

Fixed in:0:2.6-5.el9apRHSA-2026:3958

Fixed in:0:2.6-4.el9apRHSA-2026:1249

Fixed in:0:2.5-21.el9apRHSA-2026:3959

Fixed in:0:2.6-5.el9apRHSA-2026:3958

Fixed in:0:2.5-21.el9apRHSA-2026:3959

ansible-builderRocky

Fixed in:0:3.1.1-1.2.el8apRHSA-2026:3959

Fixed in:0:3.1.1-1.2.el9apRHSA-2026:3959

Fixed in:0:3.1.1-2.1.el9apRHSA-2026:3958

Fixed in:0:3.1.1-1.2.el9apRHSA-2026:3959

ansible-builderRed Hat / RHEL

Fixed in:0:3.1.1-1.2.el8apRHSA-2026:3959

Fixed in:0:3.1.1-1.2.el9apRHSA-2026:3959

Fixed in:0:3.1.1-2.1.el9apRHSA-2026:3958

Fixed in:0:3.1.1-1.2.el9apRHSA-2026:3959

ansible-coreRocky

Fixed in:2:2.16.16-2.el10apRHSA-2026:3958

Fixed in:2:2.16.15-2.el10apRHSA-2026:1249

Fixed in:2:2.16.16-2.el10apRHSA-2026:3958

Fixed in:1:2.16.15-1.el8apRHSA-2026:1506

Fixed in:1:2.16.16-1.el8apRHSA-2026:3959

Fixed in:1:2.16.15-1.el8apRHSA-2026:1506

Fixed in:1:2.16.16-1.el8apRHSA-2026:3959

ansible-coreRed Hat / RHEL

Fixed in:2:2.16.16-2.el10apRHSA-2026:3958

Fixed in:2:2.16.15-2.el10apRHSA-2026:1249

Fixed in:2:2.16.16-2.el10apRHSA-2026:3958

Fixed in:2:2.16.15-2.el10apRHSA-2026:1249

Fixed in:1:2.16.16-1.el8apRHSA-2026:3959

Fixed in:1:2.16.15-1.el8apRHSA-2026:1506

Fixed in:1:2.16.16-1.el8apRHSA-2026:3959

ansible-creatorRocky

Fixed in:0:25.12.0-1.1.el8apRHSA-2026:3959

Fixed in:0:25.12.0-1.1.el9apRHSA-2026:3959

Fixed in:0:25.12.0-2.1.el9apRHSA-2026:3958

ansible-creatorRed Hat / RHEL

Fixed in:0:25.12.0-1.1.el8apRHSA-2026:3959

Fixed in:0:25.12.0-1.1.el9apRHSA-2026:3959

Fixed in:0:25.12.0-2.1.el9apRHSA-2026:3958

Fixed in:0:25.12.0-1.1.el9apRHSA-2026:3959

Fixed in:0:25.12.0-2.1.el9apRHSA-2026:3958

ansible-dev-environmentRocky

Fixed in:0:25.12.2-1.2.el8apRHSA-2026:3959

Fixed in:0:25.12.2-1.2.el9apRHSA-2026:3959

Fixed in:0:25.12.2-1.2.el9apRHSA-2026:3958

Fixed in:0:25.12.2-1.2.el9apRHSA-2026:3959

Fixed in:0:25.12.2-1.2.el9apRHSA-2026:3958

ansible-dev-environmentRed Hat / RHEL

Fixed in:0:25.12.2-1.2.el8apRHSA-2026:3959

Fixed in:0:25.12.2-1.2.el9apRHSA-2026:3959

Fixed in:0:25.12.2-1.2.el9apRHSA-2026:3958

Fixed in:0:25.12.2-1.2.el9apRHSA-2026:3959

Fixed in:0:25.12.2-1.2.el9apRHSA-2026:3958

ansible-dev-toolsRocky

Fixed in:0:26.1.0-2.el10apRHSA-2026:1249

Fixed in:0:26.1.0-1.el8apRHSA-2026:1506

Fixed in:0:26.1.0-3.el8apRHSA-2026:3959

Fixed in:0:26.1.0-1.el8apRHSA-2026:1506

Fixed in:0:26.1.0-3.el8apRHSA-2026:3959

Fixed in:0:26.1.0-3.el9apRHSA-2026:3959

Fixed in:0:26.1.0-1.el9apRHSA-2026:1506

ansible-dev-toolsRed Hat / RHEL

Fixed in:0:26.1.0-2.el10apRHSA-2026:1249

Fixed in:0:26.1.0-1.el8apRHSA-2026:1506

Fixed in:0:26.1.0-3.el8apRHSA-2026:3959

Fixed in:0:26.1.0-1.el9apRHSA-2026:1506

Fixed in:0:26.1.0-3.el9apRHSA-2026:3959

ansible-dev-tools+serverRed Hat / RHEL

Fixed in:0:26.1.0-2.el10apRHSA-2026:1249

Fixed in:0:26.1.0-1.el8apRHSA-2026:1506

Fixed in:0:26.1.0-3.el8apRHSA-2026:3959

Fixed in:0:26.1.0-1.el9apRHSA-2026:1506

Fixed in:0:26.1.0-2.el9apRHSA-2026:1249

Fixed in:0:26.1.0-3.el9apRHSA-2026:3959

Fixed in:0:26.1.0-3.el9apRHSA-2026:3958

ansible-dev-tools+serverRocky

Fixed in:0:26.1.0-2.el10apRHSA-2026:1249

Fixed in:0:26.1.0-3.el8apRHSA-2026:3959

Fixed in:0:26.1.0-1.el8apRHSA-2026:1506

Fixed in:0:26.1.0-1.el9apRHSA-2026:1506

Fixed in:0:26.1.0-3.el9apRHSA-2026:3958

Fixed in:0:26.1.0-3.el9apRHSA-2026:3959

Fixed in:0:26.1.0-2.el9apRHSA-2026:1249

ansible-lintRed Hat / RHEL

Fixed in:0:26.1.0-2.el10apRHSA-2026:1249

Fixed in:0:26.1.0-3.el8apRHSA-2026:3959

Fixed in:0:26.1.0-1.el8apRHSA-2026:1506

Fixed in:0:26.1.0-1.el9apRHSA-2026:1506

Fixed in:0:26.1.0-3.el9apRHSA-2026:3958

ansible-lintRocky

Fixed in:0:26.1.0-2.el10apRHSA-2026:1249

Fixed in:0:26.1.0-3.el8apRHSA-2026:3959

Fixed in:0:26.1.0-1.el8apRHSA-2026:1506

Fixed in:0:26.1.0-1.el9apRHSA-2026:1506

Fixed in:0:26.1.0-2.el9apRHSA-2026:1249

ansible-navigatorRed Hat / RHEL

Fixed in:0:26.1.1-2.el10apRHSA-2026:1249

Fixed in:0:26.1.1-1.el8apRHSA-2026:1506

Fixed in:0:26.1.1-1.1.el8apRHSA-2026:3959

Fixed in:0:26.1.1-1.el9apRHSA-2026:1506

Fixed in:0:26.1.1-1.1.el9apRHSA-2026:3959

ansible-navigatorRocky

Fixed in:0:26.1.1-2.el10apRHSA-2026:1249

Fixed in:0:26.1.1-1.1.el8apRHSA-2026:3959

Fixed in:0:26.1.1-1.el8apRHSA-2026:1506

Fixed in:0:26.1.1-1.1.el8apRHSA-2026:3959

Fixed in:0:26.1.1-1.el8apRHSA-2026:1506

Fixed in:0:26.1.1-1.1.el9apRHSA-2026:3959

Fixed in:0:26.1.1-2.el9apRHSA-2026:1249

ansible-rulebookRed Hat / RHEL

Fixed in:0:1.1.7-2.el8apRHSA-2026:3959

Fixed in:0:1.2.1-1.el9apRHSA-2026:3958

Fixed in:0:1.1.7-2.el9apRHSA-2026:3959

Fixed in:0:1.2.1-1.el9apRHSA-2026:3958

Fixed in:0:1.1.7-2.el9apRHSA-2026:3959

ansible-rulebookRocky

Fixed in:0:1.1.7-2.el8apRHSA-2026:3959

Fixed in:0:1.1.7-2.el9apRHSA-2026:3959

Fixed in:0:1.2.1-1.el9apRHSA-2026:3958

ansible-runnerRocky

Fixed in:0:2.4.2-3.el8apRHSA-2026:3959

Fixed in:0:2.4.2-3.el9apRHSA-2026:3959

Fixed in:0:2.4.2-3.el9apRHSA-2026:3958

ansible-runnerRed Hat / RHEL

Fixed in:0:2.4.2-3.el8apRHSA-2026:3959

Fixed in:0:2.4.2-3.el9apRHSA-2026:3959

Fixed in:0:2.4.2-3.el9apRHSA-2026:3958

Fixed in:0:2.4.2-3.el9apRHSA-2026:3959

ansible-signRocky

Fixed in:0:0.1.4-2.el8apRHSA-2026:3959

Fixed in:0:0.1.4-2.el9apRHSA-2026:3959

Fixed in:0:0.1.4-2.el9apRHSA-2026:3958

Fixed in:0:0.1.4-2.el9apRHSA-2026:3959

ansible-signRed Hat / RHEL

Fixed in:0:0.1.4-2.el8apRHSA-2026:3959

Fixed in:0:0.1.4-2.el9apRHSA-2026:3959

Fixed in:0:0.1.4-2.el9apRHSA-2026:3958

ansible-testRocky

Fixed in:1:2.16.16-1.el8apRHSA-2026:3959

Fixed in:1:2.16.15-1.el8apRHSA-2026:1506

Fixed in:1:2.16.16-1.el9apRHSA-2026:3959

Fixed in:1:2.16.15-1.el9apRHSA-2026:1249

Fixed in:1:2.16.15-1.el9apRHSA-2026:1506

Fixed in:1:2.16.16-1.el9apRHSA-2026:3958

ansible-testRed Hat / RHEL

Fixed in:1:2.16.16-1.el8apRHSA-2026:3959

Fixed in:1:2.16.15-1.el8apRHSA-2026:1506

Fixed in:1:2.16.15-1.el9apRHSA-2026:1249

Fixed in:1:2.16.15-1.el9apRHSA-2026:1506

Fixed in:1:2.16.16-1.el9apRHSA-2026:3958

Fixed in:1:2.16.16-1.el9apRHSA-2026:3959

automation-controllerRocky

Fixed in:0:4.6.25-1.el8apRHSA-2026:1506

Fixed in:0:4.6.26-1.el8apRHSA-2026:3959

Fixed in:0:4.5.30-1.el8apRHSA-2026:1497

Fixed in:0:4.6.26-1.el8apRHSA-2026:3959

Fixed in:0:4.5.30-1.el8apRHSA-2026:1497

Fixed in:0:4.6.25-1.el8apRHSA-2026:1506

This vulnerability affects an unusually large number of packages. The highest-confidence fixes are shown above; the full list is longer. Check the referenced advisories for complete coverage.

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

0.57%probability of exploitation in 30 days

45thpercentile

Moderate risk: more likely to be exploited than 45% of all known CVEs.

References

Related Vulnerabilities

Other CWE-409 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2026-49975	High	7.5	34%	-	Fix
CVE-2026-21441	High	7.5	3.0%	-	Fix
CVE-2024-43499	High	7.5	2.6%	-	Fix
CVE-2024-28180	Medium	4.3	2.0%	-	Fix
CVE-2017-16129	Medium	5.9	1.8%	-	Fix
CVE-2022-29225	High	7.5	1.6%	-	Fix

Common questions

How do I fix CVE-2025-69223?

Published advisories record a fix for 456 affected products. The "How to fix" section on this page lists the fixed version and source advisory for each one, so apply the entry matching what you actually run.

Is CVE-2025-69223 being actively exploited?

Not that we know of. CVE-2025-69223 is not in the CISA Known Exploited Vulnerabilities catalog. Its EPSS score of 0.57% is the estimated probability that it will be exploited in the next 30 days. That is higher than 45% of all scored CVEs.

How severe is CVE-2025-69223?

CVE-2025-69223 has a CVSS v3 base score of 7.5, rated high. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.

What does CVE-2025-69223 affect?

Published advisories record a fix for python-aiohttp (Debian), aap-metrics-utility (Rocky), aap-metrics-utility (Red Hat / RHEL), ansible-automation-platform-installer (Red Hat / RHEL), and 452 more. The list on this page is capped, so there may be more.

Embed a live status badge for CVE-2025-69223

Markdown

[![CVE-2025-69223](https://tridentstack.com/cve/badge/CVE-2025-69223.svg)](https://tridentstack.com/cve/CVE-2025-69223)

HTML

<a href="https://tridentstack.com/cve/CVE-2025-69223"><img src="https://tridentstack.com/cve/badge/CVE-2025-69223.svg" alt="CVE-2025-69223"></a>

Check your Linux endpoints for this class of vulnerability

TridentStack Control continuously scans Linux endpoints for known vulnerabilities and deploys the fixes from the same console. 200 endpoints free forever, no credit card.

Patch your fleet free Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-09-09.