ansible-core vulnerabilities (Debian)
13 vulnerabilities.
-
ansible-coreDebian Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902) 6.7 Medium -
ansible-coreDebian A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is... 5.5 Medium -
ansible-coreDebian Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 High -
ansible-coreDebian Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) 7.8 High -
ansible-coreDebian Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 High -
ansible-coreDebian Ansible-core: unsafe tagging bypass via hostvars object in ansible-core 5.5 Medium -
ansible-coreDebian Ansible-core: ansible-core user may read/write unauthorized content 6.3 Medium -
ansible-coreDebian Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 5.5 Medium -
ansible-coreDebian Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 5.0 Medium -
ansible-coreDebian Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files 6.3 Medium -
ansible-coreDebian Ansible: template injection 7.1 High -
ansible-coreDebian Ansible discloses sensitive information in traceback error message 5.5 Medium -
ansible-coreDebian Improper Input Validation and Command Injection in Ansible 7.1 High