Vulnerability · Published Jul 22, 2026 · Assigned by redhat

CVE-2026-44192Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal

Medium 6.6

In plain English

A medium-severity path traversal in Red Hat Ansible Automation Platform 2 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).

Severity (CVSS 3.1)6.6Medium

Exploit odds (30 days)0.2%top 90.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the user's system. This can result in the exposure of sensitive host information and enable the attacker to execute malicious commands, potentially leading to a full system compromise.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Ansible Automation Platform 2	see references
Red Hat	Red Hat Ansible Automation Platform 2	see references

Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

References

https://access.redhat.com/security/cve/CVE-2026-44192 vdb-entry, x_refsource_REDHAT
RHBZ#2466760 issue-tracking, x_refsource_REDHAT