Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-11332— Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

Quick assessment

Affected
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Ansible是Ansible开源的一款简单易用的IT自动化系统。 Ansible存在参数注入漏洞，该漏洞源于ansible-galaxy role install命令处理依赖规范时参数分隔符中和不当，可能导致任意代码执行。

CVSS 7.8 · High EPSS 0.22% · P12

Affected Version Matrix 77

VendorProduct Version RangeStatus
Red Hat Migration Toolkit for Applications 8 any affected
Red Hat Migration Toolkit for Virtualization any affected
any affected
Red Hat OpenShift Service Mesh 3 any unaffected
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 any unaffected
any unaffected
Red Hat Red Hat Ansible Automation Platform 2 any affected
any affected
any affected
any affected
any affected
any unaffected
any affected
any affected
… +24 more rows
Red Hat Red Hat Ansible Automation Platform 2.5 1785381341< * unaffected
1785429657< * unaffected
1785430174< * unaffected
1785425335< * unaffected
1785449441< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 1:2.16.19-1.el8ap< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 1:2.16.19-1.el9ap< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.6 1785647559< * unaffected
1785649812< * unaffected
1785633038< * unaffected
1785775360< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 10 2:2.16.19-1.el10ap< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 1:2.16.19-1.el9ap< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.7 1785446384< * unaffected
1785448519< * unaffected
1785374869< * unaffected
1785375273< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 10 2:2.16.19-1.el10ap< * unaffected
Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 9 1:2.16.19-1.el9ap< * unaffected
Red Hat Red Hat Ansible Automation Platform Ansible Core 2 any affected
any affected
any affected
any affected
Red Hat Red Hat Discovery 2 1784821670< * unaffected
Red Hat Red Hat Enterprise Linux 10 1:2.16.16-2.el10_2.1< * unaffected
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support 1:2.16.14-1.el10_0.1< * unaffected
Red Hat Red Hat Enterprise Linux 8 0:2.16.3-4.el8_10< * unaffected
Red Hat Red Hat Enterprise Linux 9 1:2.14.18-3.el9_8.1< * unaffected
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 1:2.14.14-1.el9_4.1< * unaffected
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support 1:2.14.18-1.el9_6.1< * unaffected
Red Hat Red Hat OpenShift Container Platform 4 any affected
Red Hat Red Hat Satellite 6.17 for RHEL 9 1:2.16.19-1.el9sat< * unaffected
Red Hat Red Hat Satellite 6.18 for RHEL 9 1:2.16.19-1.el9sat< * unaffected
0:1.3.1-5.el9pc< * unaffected
0:3.73.30-3.el9pc< * unaffected
Red Hat Red Hat Satellite 6.19 for RHEL 9 1:2.16.19-1.el9sat< * unaffected
Red Hat Self-service automation portal 2 any affected
Red Hat Service Telemetry Framework 1.5 any unaffected
any unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-11332

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
参数注入或修改
Source: CVE Program / CVE List V5
Vulnerability Title
Ansible 参数注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ansible是Ansible开源的一款简单易用的IT自动化系统。 Ansible存在参数注入漏洞，该漏洞源于ansible-galaxy role install命令处理依赖规范时参数分隔符中和不当，可能导致任意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 1:2.16.19-1.el8ap ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 1:2.16.19-1.el9ap ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 10 2:2.16.19-1.el10ap ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 1:2.16.19-1.el9ap ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 10 2:2.16.19-1.el10ap ~ * cpe:/a:redhat:ansible_automation_platform:2.7::el10
Red Hat Red Hat Ansible Automation Platform 2.7 for RHEL 9 1:2.16.19-1.el9ap ~ * cpe:/a:redhat:ansible_automation_platform:2.7::el10
Red Hat Red Hat Enterprise Linux 10 1:2.16.16-2.el10_2.1 ~ * cpe:/o:redhat:enterprise_linux:10.2
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support 1:2.16.14-1.el10_0.1 ~ * cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat Red Hat Enterprise Linux 8 0:2.16.3-4.el8_10 ~ * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat Red Hat Enterprise Linux 9 1:2.14.18-3.el9_8.1 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 1:2.14.14-1.el9_4.1 ~ * cpe:/a:redhat:rhel_e4s:9.4::appstream
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support 1:2.14.18-1.el9_6.1 ~ * cpe:/a:redhat:rhel_eus:9.6::appstream
Red Hat Red Hat Satellite 6.17 for RHEL 9 1:2.16.19-1.el9sat ~ * cpe:/a:redhat:satellite:6.17::el9
Red Hat Red Hat Satellite 6.18 for RHEL 9 1:2.16.19-1.el9sat ~ * cpe:/a:redhat:satellite:6.18::el9
Red Hat Red Hat Satellite 6.18 for RHEL 9 0:1.3.1-5.el9pc ~ * cpe:/a:redhat:satellite:6.18::el9
Red Hat Red Hat Satellite 6.18 for RHEL 9 0:3.73.30-3.el9pc ~ * cpe:/a:redhat:satellite:6.18::el9
Red Hat Red Hat Satellite 6.19 for RHEL 9 1:2.16.19-1.el9sat ~ * cpe:/a:redhat:satellite:6.19::el9
Red Hat Red Hat Ansible Automation Platform 2.5 1785381341 ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.5 1785429657 ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.5 1785430174 ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat Red Hat Ansible Automation Platform 2.5 1785425335 ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat Red Hat Ansible Automation Platform 2.5 1785449441 ~ * cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat Red Hat Ansible Automation Platform 2.6 1785647559 ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat Red Hat Ansible Automation Platform 2.6 1785649812 ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat Red Hat Ansible Automation Platform 2.6 1785633038 ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat Red Hat Ansible Automation Platform 2.6 1785775360 ~ * cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat Red Hat Ansible Automation Platform 2.7 1785446384 ~ * cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat Red Hat Ansible Automation Platform 2.7 1785448519 ~ * cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat Red Hat Ansible Automation Platform 2.7 1785374869 ~ * cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat Red Hat Ansible Automation Platform 2.7 1785375273 ~ * cpe:/a:redhat:ansible_automation_platform:2.7::el9

II. Public POCs for CVE-2026-11332

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 6935 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-11332

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-11332 (18)

Other References for CVE-2026-11332 (1)

Same Patch Batch · Red Hat · 2026-06-05 · 11 CVEs total

CVE-2026-50256 7.8 HIGH Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font
CVE-2026-50257 7.8 HIGH Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestro
CVE-2026-50259 7.8 HIGH Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb s
CVE-2026-50258 7.8 HIGH Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb k
CVE-2026-50260 7.8 HIGH Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter(
CVE-2026-50261 7.8 HIGH Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangeco
CVE-2026-50264 7.8 HIGH Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dr
CVE-2026-50262 5.5 MEDIUM Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in gl
CVE-2026-50263 5.5 MEDIUM Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information dis
CVE-2026-9088 2.7 LOW Keycloak: keycloak: information disclosure due to user profile permission bypass

IV. Related Vulnerabilities

Same product: Red Hat Ansible Automation Platform 2.5 for RHEL 8
Same vendor: Red Hat
Same weakness: CWE-88

V. Comments for CVE-2026-11332

No comments yet

Leave a comment