Skip to content
OpenAdvisories
High RHSA-2022:0108 1 CVE

Red Hat Security Advisory: ansible-runner security and bug fix update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.0::el8 ansible-runner 0:2.0.3-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.0::el8 python38-ansible-runner 0:2.0.3-2.el8ap

Vulnerabilities 1

  • High 7.8
    CVE-2021-4041

    ansible-runner vulnerable to shell command injection

    A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansible_runner.interface.run_command, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets exec…

    ansible-runner ansible-runner ansible-runner Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2028074
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0108.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-4041
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-4041
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-4041
  • article
    https://github.com/ansible/ansible-runner/commit/3533f265f4349a3f2a0283158cd01b59a6bbc7bd