3.1
Low
CVE-2026-71465 RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using…
Description
RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags (--version, --help) since injected element displaces required pattern positional. Would escalate if ansible-core ever defaults pattern.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Ansible Automation Platform 2 | Versions not published | |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Versions not published | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Versions not published | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Versions not published | |
| Red Hat Ansible Automation Platform 2.6 1789673739 | earliest → < 1789673739 | 1789673739 |
| Red Hat Ansible Automation Platform 2.7 1789580684 | earliest → < 1789580684 | 1789580684 |
References
- RHSA-2026:71113 access.redhat.com
- RHSA-2026:71114 access.redhat.com
- RHSA-2026:71177 access.redhat.com
- RHSA-2026:71179 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2512375 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Ansible Automation Platform 2
The 210 CVEs of Red Hat Ansible Automation Platform 2 →
CVE-2026-114236
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…
3.3
Low
CVE-2026-109131
Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl)
5.4
Medium
CVE-2026-92982
A flaw was found in Ansible Operator Plugins
8.5
High
CVE-2026-89091
Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
8.8
High