Log in Start free

Vulnerability · Published Jun 5, 2026 · Assigned by redhat

CVE-2026-11332Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

High 7.8

In plain English

A high-severity argument injection in Migration Toolkit for Applications 8 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 87.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10ansible-core1:2.16.16-2.el10_2.1ALSA-2026:57148
AlmaLinux:8ansible-core2.16.3-4.el8_10ALSA-2026:66248
AlmaLinux:9ansible-core1:2.14.18-3.el9_8.1ALSA-2026:57149
AlmaLinux:10ansible-test1:2.16.16-2.el10_2.1ALSA-2026:57148
AlmaLinux:8ansible-test2.16.3-4.el8_10ALSA-2026:66248
AlmaLinux:9ansible-test1:2.14.18-3.el9_8.1ALSA-2026:57149
Debian:12ansible5.4.0-1DEBIAN-CVE-2026-11332
Debian:13ansible5.4.0-1DEBIAN-CVE-2026-11332
Debian:14ansible5.4.0-1DEBIAN-CVE-2026-11332
Debian:12ansible-coreno fix listedDEBIAN-CVE-2026-11332
Debian:13ansible-core2.19.11-0+deb13u1DEBIAN-CVE-2026-11332
Debian:14ansible-core2.21.1~rc1-1DEBIAN-CVE-2026-11332
PyPIansible-core2.20.7rc1GHSA-w8p5-mx5w-cpqj
PyPIansible-core2.21.1rc1GHSA-w8p5-mx5w-cpqj
PyPIansible-core2.16.19rc1, 2.18.18rc1, 2.19.11rc1, 2.20.7rc1, 2.21.1rc1PYSEC-2026-3458
PyPIansible-core2.18.18rc1GHSA-w8p5-mx5w-cpqj
PyPIansible-core2.16.19rc1GHSA-w8p5-mx5w-cpqj
PyPIansible-core2.19.11rc1GHSA-w8p5-mx5w-cpqj
Rocky Linux:10ansible-core1:2.16.16-2.el10_2.1RLSA-2026:57148
Rocky Linux:8ansible-core0:2.16.3-4.el8_10RLSA-2026:66248
Rocky Linux:9ansible-core1:2.14.18-3.el9_8.1RLSA-2026:57149
Ubuntu:24.04:LTSansibleno fix listedUBUNTU-CVE-2026-11332
Ubuntu:25.10ansibleno fix listedUBUNTU-CVE-2026-11332
Ubuntu:26.04:LTSansibleno fix listedUBUNTU-CVE-2026-11332
Ubuntu:26.10ansibleno fix listedUBUNTU-CVE-2026-11332
Ubuntu:22.04:LTSansible-coreno fix listedUBUNTU-CVE-2026-11332
Ubuntu:24.04:LTSansible-coreno fix listedUBUNTU-CVE-2026-11332
Ubuntu:25.10ansible-coreno fix listedUBUNTU-CVE-2026-11332
Ubuntu:26.04:LTSansible-coreno fix listedUBUNTU-CVE-2026-11332
Ubuntu:26.10ansible-coreno fix listedUBUNTU-CVE-2026-11332

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 see references
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 see references
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 see references
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 10 see references
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 10 see references
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 10 see references
Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 10 see references
Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 9 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support see references
Red Hat Red Hat Satellite 6.17 for RHEL 9 see references
Red Hat Red Hat Satellite 6.18 for RHEL 9 see references
Red Hat Red Hat Satellite 6.18 for RHEL 9 see references
Red Hat Red Hat Satellite 6.18 for RHEL 9 see references
Red Hat Red Hat Satellite 6.19 for RHEL 9 see references
Red Hat Red Hat Ansible Automation Platform 2.5 see references
Red Hat Red Hat Ansible Automation Platform 2.5 see references
Red Hat Red Hat Ansible Automation Platform 2.5 see references

Weakness: CWE-88 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References