Vulnerability · Published Dec 4, 2025 · Assigned by redhat
CVE-2025-14010Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output
Medium 5.5
In plain English
A medium-severity sensitive data in logs in Ansible Community General Collection from ansible-collections. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:13 | ansible | 12.0.0+dfsg-0+deb13u1 | DEBIAN-CVE-2025-14010 |
| Debian:14 | ansible | 12.2.0+dfsg-1 | DEBIAN-CVE-2025-14010 |
| PyPI | ansible | 12.2.0 | PYSEC-2026-1119 |
| PyPI | ansible | 12.2.0 | GHSA-8ggh-xwr9-3373 |
| Ubuntu:24.04:LTS | ansible | no fix listed | UBUNTU-CVE-2025-14010 |
| Ubuntu:25.10 | ansible | no fix listed | UBUNTU-CVE-2025-14010 |
| Ubuntu:26.04:LTS | ansible | no fix listed | UBUNTU-CVE-2025-14010 |
| Ubuntu:26.10 | ansible | no fix listed | UBUNTU-CVE-2025-14010 |
| Ubuntu:22.04:LTS | ansible-core | no fix listed | UBUNTU-CVE-2025-14010 |
| Ubuntu:24.04:LTS | ansible-core | no fix listed | UBUNTU-CVE-2025-14010 |
| Ubuntu:25.10 | ansible-core | no fix listed | UBUNTU-CVE-2025-14010 |
| Ubuntu:26.04:LTS | ansible-core | no fix listed | UBUNTU-CVE-2025-14010 |
| Ubuntu:26.10 | ansible-core | no fix listed | UBUNTU-CVE-2025-14010 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ansible-collections | Ansible Community General Collection | 7.1.0 – before 9.5.1310.0.0 – before 10.7.611.0.0 – before 11.4.112.0.0 – before 12.2.0 |
| Red Hat | Red Hat Ceph Storage 5 | see references |
| Red Hat | Red Hat Ceph Storage 6 | see references |
| Red Hat | Red Hat Ceph Storage 7 | see references |
| Red Hat | Red Hat Ceph Storage 8 | see references |
| Red Hat | Red Hat OpenStack Platform 17.1 | see references |
| Red Hat | Red Hat OpenStack Platform 18.0 | see references |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- https://access.redhat.com/security/cve/CVE-2025-14010 vdb-entry, x_refsource_REDHAT
- RHBZ#2418774 issue-tracking, x_refsource_REDHAT
- https://github.com/ansible-collections/community.general/issues/11000
- https://github.com/ansible-collections/community.general/pull/11005
- https://github.com/ansible-community/ansible-build-data/blob/main/12/CHANGELOG-v12.md#security-fixes