Description
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.3 for RHEL 8 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 2.3 for RHEL 9 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 8 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 9 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 1.2 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ansible | 5.4.0-1 | — |
| Debian 14 | ansible-core | 2.14.11-1 | — |
| Debian 13 | ansible | 5.4.0-1 | — |
| Debian 13 | ansible-core | 2.14.11-1 | — |
| Debian 12 | ansible | 5.4.0-1 | — |
| Debian 12 | ansible-core | 2.14.16-0+deb12u1 | — |
| Debian 10 | ansible | 2.7.7+dfsg-1+deb10u2 | DLA-3695-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | ansible +1 | No fix yet | — |
| Ubuntu 26.04 LTS | ansible +1 | No fix yet | — |
| Ubuntu 25.10 | ansible +1 | No fix yet | — |
| Ubuntu 24.04 LTS | ansible +1 | No fix yet | — |
| Ubuntu 22.04 LTS | ansible-core | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | ansible | No fix yet | — |
| Ubuntu Pro 20.04 LTS | ansible | No fix yet | — |
| Ubuntu Pro 18.04 LTS | ansible | No fix yet | — |
| Ubuntu Pro 16.04 LTS | ansible | No fix yet | — |
| Ubuntu Pro 14.04 LTS | ansible | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ansible Automation Platform Inside 2 | ansible-core | 2.14.11-1.el8ap | RHSA-2023:5758, RHSA-2023:5701 |
| Red Hat Ansible Automation Platform Developer 2 | ansible-core | 2.14.11-1.el8ap | RHSA-2023:5758, RHSA-2023:5701 |
| Red Hat Ansible Automation Platform 2 | ansible-core | 2.14.11-1.el8ap | RHSA-2023:5758, RHSA-2023:5701 |
| Red Hat Ansible Automation Platform 2 | automation-controller-venv-tower | 4.3.16-1.el8ap | RHSA-2023:5758, RHSA-2023:5701 |
| Red Hat Ansible Automation Platform 2 | python-django +1 | 3.2.22-1.el9ap | RHSA-2023:5758 |
| Red Hat Ansible Automation Platform 2 | python39-django +1 | 3.2.22-1.el8ap | RHSA-2023:5758 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | ansible-core | 2.16.9-1.1 | openSUSE-SU-2024:14251-1 |
| openSUSE Tumbleweed | ansible-core-2.17 | 2.17.6-1.1 | openSUSE-SU-2024:14537-1 |
| openSUSE Tumbleweed | ansible-core-2.18 | 2.18.10-2.1 | openSUSE-SU-2025:15638-1 |
| openSUSE Tumbleweed | ansible-core-2.19 | 2.19.4-1.1 | openSUSE-SU-2025:15754-1 |
| openSUSE Tumbleweed | ansible-core-2.20 | 2.20.6-1.1 | openSUSE-SU-2026:10945-1 |
| openSUSE Tumbleweed | ansible-core-2.21 | 2.21.6-1.1 | openSUSE-SU-2026:12451-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | ansible-core +1 | 2.15.3-1.amzn2023.0.3 | ALAS2023-2024-505 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | ansible | 2.17.0-1 | — |
| Azure Linux 2 (CBL-Mariner) | ansible | 2.14.11-1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ansible | < 8.5.0 | 8.5.0 | GHSA-jpvw-p8pr-9g2x |
Advisories 11
- openSUSE-SU-2026:12451-1 ansible-core-2.21-2.21.6-1.1 on GA media SUSE / openSUSE Security Updates · Nov 7, 2026
- RHSA-2023:5758 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2023:5701 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- WID-SEC-2023-2447 Ansible: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Jun 7, 2026
- openSUSE-SU-2026:10945-1 ansible-core-2.20-2.20.6-1.1 on GA media SUSE / openSUSE Security Updates · Jun 4, 2026
- openSUSE-SU-2025:15638-1 ansible-core-2.18-2.18.10-2.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-3695-1 ansible - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:14251-1 ansible-core-2.16-2.16.9-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:15754-1 ansible-core-2.19-2.19.4-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14537-1 ansible-core-2.17-2.17.6-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ALAS2023-2024-505 Moderate: ansible-core security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 6, 2024
References
- RHSA-2023:5701 vendor-advisory
- RHSA-2023:5758 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-5115 vdb-entry
- RHBZ#2233810 issue-tracking