ansible

3 results · Clear filters · Feed

• High 7.3
  CVE-2026-11837 Public exploit

  Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown

  A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu
  Jun 10, 2026
• Medium 6.3
  CVE-2024-9902 Public exploit

  Ansible-core: ansible-core user may read/write unauthorized content

  A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the `user` module against the unprivi…

  Red Hat Red Hat Enterprise Linux 10 Red Hat Ansible Automation Platform 2.5 for RHEL 9 Red Hat Ansible Automation Platform 2.5 for RHEL 8 Linux Debian Ubuntu PyPI
  Nov 6, 2024
• Medium 6.6
  CVE-2016-9587 Public exploit EPSS 17%

  Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

  Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…

  ansible ansible ansible ansible Debian Ubuntu Alpine PyPI
  Apr 24, 2018