Description
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| [UNKNOWN] | ansible | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ansible | 2.6.1+dfsg-1 | — |
| Debian 13 | ansible | 2.6.1+dfsg-1 | — |
| Debian 12 | ansible | 2.6.1+dfsg-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | ansible | 2.5.1+dfsg-1ubuntu0.1 | USN-4072-1 |
| Ubuntu 16.04 LTS | ansible | 2.0.0.2-2ubuntu1.3 | USN-4072-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | imgbased +1 | 1.0.22-1.el7ev | RHSA-2018:2321 |
| RHEL 7 | redhat-release-virtualization-host +1 | 4.2-5.0.el7 | RHSA-2018:2321 |
| RHEL 7 | redhat-virtualization-host +1 | 4.2-20180724.0.el7_5 | RHSA-2018:2321 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 13 | ansible | 2.4.6.0-1.el7ae | RHSA-2018:2585 |
| Red Hat OpenStack 12 | ansible | 2.4.6.0-1.el7ae | RHBA-2018:3788 |
| Red Hat OpenStack 12 | ansible-role-redhat-subscription | 1.0.1-4.el7ost | RHBA-2018:3788 |
| Red Hat OpenStack 10 | ansible | 2.4.6.0-1.el7ae | RHSA-2019:0054 |
| Red Hat Ansible Engine 2 | ansible +1 | 2.4.6.0-1.el7ae | RHSA-2018:2166, RHSA-2018:2152, RHSA-2018:2151 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 | SUSE-SU-2024:1509-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud Crowbar 8 | ansible | 2.4.6.0-3.3.1 | SUSE-SU-2018:4130-1 |
| SUSE OpenStack Cloud 8 | ansible | 2.4.6.0-3.3.1 | SUSE-SU-2018:4130-1 |
| SUSE Manager Proxy Module 4.3 | ansible | 2.9.27-150000.1.17.2 | SUSE-SU-2024:1509-1 |
| SUSE Manager Proxy Module 4.3 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 | SUSE-SU-2024:1509-1 |
| SUSE Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 | SUSE-SU-2024:1509-1 |
| SUSE Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 | SUSE-SU-2024:1509-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | golang-github-prometheus-node_exporter | 1.5.0-159000.6.2.1 | SUSE-SU-2024:1427-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | uyuni-tools | 0.1.7-159000.3.8.1 | SUSE-SU-2024:1427-1 |
| SUSE Manager Client Tools 15 | POS_Image-JeOS7 +1 | 0.1.1710765237.46af599-150000.1.21.2 | SUSE-SU-2024:1509-1, SUSE-SU-2024:1427-1 |
| SUSE Manager Client Tools 15 | ansible | 2.9.27-150000.1.17.2 | SUSE-SU-2024:1509-1, SUSE-SU-2024:1427-1 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 | SUSE-SU-2024:1509-1, SUSE-SU-2024:1427-1 |
| SUSE Manager Client Tools 15 | grafana | 9.5.16-159000.4.30.2 | SUSE-SU-2024:1509-1, SUSE-SU-2024:1427-1 |
| SUSE Manager Client Tools 15 | mgr-daemon | 4.3.9-150000.1.47.2 | SUSE-SU-2024:1509-1 |
| SUSE Manager Client Tools 15 | spacecmd | 4.3.27-150000.3.116.2 | SUSE-SU-2024:1509-1, SUSE-SU-2024:1427-1 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 4.3.19-150000.3.89.2 | SUSE-SU-2024:1509-1, SUSE-SU-2024:1427-1 |
| SUSE Manager Client Tools 15 | spacewalk-koan | 4.3.6-150000.3.33.2 | SUSE-SU-2024:1509-1 |
| SUSE Manager Client Tools 15 | supportutils-plugin-susemanager-client | 5.0.3-159000.6.21.2 | SUSE-SU-2024:1427-1 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.3.10-150000.1.39.2 | SUSE-SU-2024:1509-1 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 | SUSE-SU-2024:1509-1 |
| SUSE Manager Client Tools 15 | uyuni-tools | 0.1.7-159000.3.8.1 | SUSE-SU-2024:1427-1 |
| SUSE HPE Helion OpenStack 8 | ansible | 2.4.6.0-3.3.1 | SUSE-SU-2018:4130-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | POS_Image-JeOS7 +1 | 0.1.1710765237.46af599-150000.1.21.2 | SUSE-SU-2024:1509-1 |
| openSUSE Leap 15.5 | ansible | 2.9.27-150000.1.17.2 | SUSE-SU-2024:1509-1 |
| openSUSE Leap 15.5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 | SUSE-SU-2024:1509-1 |
| openSUSE Leap 15.5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 | SUSE-SU-2024:1509-1 |
| openSUSE Leap 15.5 | spacecmd | 4.3.27-150000.3.116.2 | SUSE-SU-2024:1509-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ansible | < 2.4.6.0 | 2.4.6.0 | GHSA-3xvg-x47j-x75w |
| PyPI | ansible | >= 2.5, < 2.5.6 | 2.5.6 | GHSA-3xvg-x47j-x75w |
| PyPI | ansible | >= 2.6, < 2.6.1 | 2.6.1 | GHSA-3xvg-x47j-x75w |
| PyPI | ansible | < 2.4.6.0 · >= 2.5, < 2.5.6 · >= 2.6, < 2.6.1 | 2.4.6.0, 2.5.6, 2.6.1 | PYSEC-2018-81 |
Advisories 13
- RHSA-2019:0054 Red Hat Security Advisory: ansible security update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:2585 Red Hat Security Advisory: ansible security update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:2321 Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:2166 Red Hat Security Advisory: ansible security and bug fix update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:2152 Red Hat Security Advisory: ansible security update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:2150 Red Hat Security Advisory: ansible security and bug fix update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:2151 Red Hat Security Advisory: ansible security and bug fix update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHBA-2018:3788 Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 12 Bug Fix and Enhancement Advisory Red Hat Security Advisories (RHSA) · Jul 1, 2026
- WID-SEC-2024-0959 Ansible: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode BSI CERT-Bund (WID) · Jun 7, 2026
- USN-4072-1 ansible vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2018:4130-1 Security update for ansible SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1509-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1427-1 Security Beta update for SUSE Manager Client Tools and Salt SUSE / openSUSE Security Updates · Feb 4, 2026
References
- RHSA-2018:2166 vendor-advisory
- RHSA-2018:2152 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874
- RHSA-2018:2150 vendor-advisory
- 1041396 vdb-entry
- RHBA-2018:3788 vendor-advisory
- RHSA-2019:0054 vendor-advisory
- RHSA-2018:2151 vendor-advisory
- RHSA-2018:2321 vendor-advisory
- RHSA-2018:2585 vendor-advisory
- USN-4072-1 vendor-advisory