Description
A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ansible | ansible_tower 3.7, ansible_engine 2.9.23 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ansible | 5.4.0-1 | — |
| Debian 14 | ansible-core | 2.12.0-1 | — |
| Debian 13 | ansible | 5.4.0-1 | — |
| Debian 13 | ansible-core | 2.12.0-1 | — |
| Debian 12 | ansible | 5.4.0-1 | — |
| Debian 12 | ansible-core | 2.12.0-1 | — |
| Debian 10 | ansible | 2.7.7+dfsg-1+deb10u2 | DLA-3695-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | ansible | No fix yet | — |
| Ubuntu 26.04 LTS | ansible | No fix yet | — |
| Ubuntu 25.10 | ansible | No fix yet | — |
| Ubuntu 24.04 LTS | ansible | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | ansible | 2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1 | USN-5315-1 |
| Ubuntu Pro 20.04 LTS | ansible | 2.9.6+dfsg-1ubuntu0.1~esm1 | USN-5315-1 |
| Ubuntu Pro 18.04 LTS | ansible | 2.5.1+dfsg-1ubuntu0.1+esm1 | USN-5315-1 |
| Ubuntu Pro 16.04 LTS | ansible | 2.0.0.2-2ubuntu1.3+esm1 | USN-5315-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ansible Engine 2 | ansible +1 | 2.9.23-1.el7ae | RHSA-2021:2664, RHSA-2021:2663 |
| Red Hat Ansible Automation Platform 2 | ansible | 2.9.23-1.el8ap | RHBA-2021:2703 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 | golang-github-prometheus-node_exporter | 1.3.0-150000.3.15.1 | SUSE-SU-2022:3178-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 | golang-github-prometheus-node_exporter | 1.3.0-150000.3.15.1 | SUSE-SU-2022:3178-1 |
| SLE HPC 15 | golang-github-prometheus-node_exporter | 1.3.0-150000.3.15.1 | SUSE-SU-2022:3178-1 |
| SUSE OpenStack Cloud Crowbar 8 | ansible | 2.9.27-3.21.1 | SUSE-SU-2021:4152-1 |
| SUSE OpenStack Cloud 8 | ansible | 2.9.27-3.21.1 | SUSE-SU-2021:4152-1 |
| SUSE Manager Server Module 4.3 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.15.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Server Module 4.3 | python-hwdata | 2.3.5-150000.3.9.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Server Module 4.2 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.15.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Server Module 4.2 | python-hwdata | 2.3.5-150000.3.9.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Server Module 4.1 | python-hwdata | 2.3.5-150000.3.9.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.3 | ansible | 2.9.27-150000.1.14.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.3 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.15.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.3 | prometheus-blackbox_exporter | 0.19.0-150000.1.11.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.3 | python-hwdata | 2.3.5-150000.3.9.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.3 | zypp-plugin-spacewalk | 1.0.13-150000.3.32.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.2 | ansible | 2.9.27-150000.1.14.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.2 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.15.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.2 | prometheus-blackbox_exporter | 0.19.0-150000.1.11.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.2 | python-hwdata | 2.3.5-150000.3.9.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.2 | zypp-plugin-spacewalk | 1.0.13-150000.3.32.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.1 | python-hwdata | 2.3.5-150000.3.9.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Proxy Module 4.1 | zypp-plugin-spacewalk | 1.0.13-150000.3.32.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | dracut-saltboot | 0.1.1681904360.84ef141-159000.3.30.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | golang-github-QubitProducts-exporter_exporter | 0.4.0-159000.4.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | prometheus-blackbox_exporter | 0.24.0-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | uyuni-proxy-systemd-services | 5.0.1-159000.3.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | ansible | 2.9.27-150000.1.14.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1657643023.0d694ce-150000.1.35.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.15.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | golang-github-boynux-squid_exporter | 1.6-159000.4.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | golang-github-lusitaniae-apache_exporter | 1.0.0-159000.4.12.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | golang-github-prometheus-prometheus | 2.45.0-159000.6.33.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | grafana | 9.5.8-159000.4.24.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | mgr-daemon | 4.3.5-150000.1.35.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | mgr-push | 5.0.1-159000.4.21.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | mgr-virtualization | 4.3.6-150000.1.32.1 | SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | prometheus-blackbox_exporter | 0.19.0-150000.1.11.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | prometheus-postgres_exporter | 0.10.1-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | python-hwdata | 2.3.5-150000.3.9.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | python-pyvmomi | 6.7.3-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | rhnlib | 5.0.1-159000.6.30.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | spacecmd | 4.3.14-150000.3.83.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 4.3.11-150000.3.65.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | supportutils-plugin-salt | 1.2.2-159000.5.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | supportutils-plugin-susemanager-client | 5.0.1-159000.6.15.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.3.5-150000.1.24.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.6-150000.1.6.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3178-1 |
| SUSE Manager Client Tools 15 | zypp-plugin-spacewalk | 1.0.13-150000.3.32.1 | SUSE-SU-2022:3178-1 |
| SUSE HPE Helion OpenStack 8 | ansible | 2.9.27-3.21.1 | SUSE-SU-2021:4152-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | ansible-10 | 10.6.0-1.1 | openSUSE-SU-2024:14536-1 |
| openSUSE Tumbleweed | ansible-11 | 11.11.0-1.1 | openSUSE-SU-2025:15605-1 |
| openSUSE Tumbleweed | ansible-12 | 12.2.0-1.1 | openSUSE-SU-2025:15753-1 |
| openSUSE Tumbleweed | ansible-13 | 13.7.0-1.1 | openSUSE-SU-2026:10944-1 |
| openSUSE Tumbleweed | ansible-14 | 14.6.0-1.1 | openSUSE-SU-2026:12447-1 |
| openSUSE Tumbleweed | ansible-9 | 9.8.0-1.1 | openSUSE-SU-2024:14244-1 |
| openSUSE Leap 15.4 | ansible | 2.9.27-150000.1.14.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.4 | dracut-saltboot | 0.1.1657643023.0d694ce-150000.1.35.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.4 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.15.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.4 | prometheus-blackbox_exporter | 0.19.0-150000.1.11.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.4 | python-hwdata | 2.3.5-150000.3.9.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.4 | spacecmd | 4.3.14-150000.3.83.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.4 | wire | 0.5.0-150000.1.6.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.3 | ansible | 2.9.27-150000.1.14.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.3 | dracut-saltboot | 0.1.1657643023.0d694ce-150000.1.35.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.3 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.15.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.3 | python-hwdata | 2.3.5-150000.3.9.1 | SUSE-SU-2022:3178-1 |
| openSUSE Leap 15.3 | spacecmd | 4.3.14-150000.3.83.1 | SUSE-SU-2022:3178-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | ansible | 2.12.1-1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ansible | < 2.9.23rc1 | 2.9.23rc1 | GHSA-2pfh-q76x-gwvm |
| PyPI | ansible | >= 2.10.0a1, < 2.10.11rc1 | 2.10.11rc1 | GHSA-2pfh-q76x-gwvm |
| PyPI | ansible | >= 2.11.0a1, < 2.11.2rc1 | 2.11.2rc1 | GHSA-2pfh-q76x-gwvm |
| PyPI | ansible | < 2.9.23 | 2.9.23 | PYSEC-2021-358 |
Advisories 15
- openSUSE-SU-2026:12447-1 ansible-14-14.6.0-1.1 on GA media SUSE / openSUSE Security Updates · Nov 7, 2026
- RHSA-2021:2663 Red Hat Security Advisory: Ansible security and bug fix update (2.9.23) Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2021:2664 Red Hat Security Advisory: Ansible security and bug fix update (2.9.23) Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHBA-2021:2703 Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform Product Release Red Hat Security Advisories (RHSA) · Jun 27, 2026
- USN-5315-1 ansible vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- WID-SEC-2022-1355 Ansible: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und Offenlegung von Daten BSI CERT-Bund (WID) · Jun 7, 2026
- openSUSE-SU-2026:10944-1 ansible-13-13.7.0-1.1 on GA media SUSE / openSUSE Security Updates · Jun 4, 2026
- openSUSE-SU-2025:15605-1 ansible-11-11.11.0-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-3695-1 ansible - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2025:15753-1 ansible-12-12.2.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0196-1 Security Beta update for SUSE Manager Client Tools and Salt SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14536-1 ansible-10-10.6.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14244-1 ansible-9-9.8.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- SUSE-SU-2021:4152-1 Security update for ansible SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2022:3178-1 Important security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · May 2, 2025