Red Hat Security Advisory: ansible-core security update

Fixed packages 2

Vulnerabilities 1

• High 7.8
  CVE-2026-11332

  Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

  A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git con…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux PyPI
  Jun 5, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2485379
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67465.json
• report
  https://access.redhat.com/security/cve/CVE-2026-11332
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-11332
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-11332
• article
  https://github.com/ansible/ansible