Skip to content
fr Sign in
7.8 High

CVE-2026-11332 Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

Description

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.

CVSS 3.1 detail

Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Local
Attack complexity
Low
Privileges required
None
Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected products and versions

Product Affected versions Fixed in
Red Hat Ansible Automation Platform 2 Versions not published
Migration Toolkit for Applications 8 Versions not published
Migration Toolkit for Virtualization Versions not published
OpenShift Service Mesh 3 Versions not published
Red Hat Advanced Cluster Management for Kubernetes 2 Versions not published
Red Hat Ansible Automation Platform Ansible Core 2 Versions not published
Red Hat Discovery 2 1784821670 earliest → < 1784821670 1784821670
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Show the 24 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux 9 Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Satellite 6 Versions not published
Self-service automation portal 2 Versions not published
Service Telemetry Framework 1.5 Versions not published
Red Hat Ansible Automation Platform 2.7 for RHEL 10 Versions not published
Red Hat Ansible Automation Platform 2.7 for RHEL 9 Versions not published
Red Hat Ansible Automation Platform 2.5 for RHEL 8 Versions not published
Red Hat Ansible Automation Platform 2.5 for RHEL 9 Versions not published
Red Hat Ansible Automation Platform 2.6 for RHEL 10 Versions not published
Red Hat Ansible Automation Platform 2.6 for RHEL 9 Versions not published
Red Hat Ansible Automation Platform 2.5 1785449441 earliest → < 1785449441 1785449441
Red Hat Ansible Automation Platform 2.7 1792138710 earliest → < 1792138710 1792138710
Red Hat Ansible Automation Platform 2.6 1785775360 earliest → < 1785775360 1785775360
Red Hat Satellite 6.17 for RHEL 9 Versions not published
Red Hat Satellite 6.18 for RHEL 9 Versions not published
Red Hat Satellite 6.19 for RHEL 9 Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support Versions not published
Red Hat OpenShift Container Platform 4.21 1791981285 earliest → < 1791981285 1791981285
Red Hat OpenShift Container Platform 5 Versions not published
Red Hat OpenShift Container Platform 4.20 1793175483 earliest → < 1793175483 1793175483
Red Hat OpenShift Container Platform 4.19 1793175207 earliest → < 1793175207 1793175207

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Ansible Automation Platform 2

The 211 CVEs of Red Hat Ansible Automation Platform 2 →
CVE-2026-123037 Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902) 6.7 Medium CVE-2026-114236 storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a… 3.3 Low CVE-2026-109131 Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl) 5.4 Medium CVE-2026-92982 A flaw was found in Ansible Operator Plugins 8.5 High
Track this CVE