CVE-2026-44192— Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal
Quick assessment
Affected
Red Hat Red Hat Ansible Automation Platform 2
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Red Hat Ansible Lightspeed是美国Red Hat公司的一款集成人工智能的自动化开发辅助框架。 Red Hat Ansible Lightspeed存在路径遍历漏洞，该漏洞源于路径遍历问题，允许攻击者通过间接提示注入操纵AI代理，导致将文件写入未授权位置，暴露敏感主机信息并执行恶意命令。
Possible ATT&CK Techniques 3 AI
T1530 · Data from Cloud Storage T1059 · Command and Scripting Interpreter T1105 · Ingress Tool TransferAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2 | any |
affected |
any |
affected | ||
any |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-44192
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the user's system. This can result in the exposure of sensitive host information and enable the attacker to execute malicious commands, potentially leading to a full system compromise.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat Ansible Lightspeed 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Ansible Lightspeed是美国Red Hat公司的一款集成人工智能的自动化开发辅助框架。 Red Hat Ansible Lightspeed存在路径遍历漏洞，该漏洞源于路径遍历问题，允许攻击者通过间接提示注入操纵AI代理，导致将文件写入未授权位置，暴露敏感主机信息并执行恶意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
II. Public POCs for CVE-2026-44192
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44192
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-44192 (2)
Same Patch Batch · Red Hat · 2026-07-22 · 8 CVEs total
| CVE-2026-44189 | 7.8 HIGH | Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrary code execut |
| CVE-2026-44190 | 7.8 HIGH | Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execut |
| CVE-2026-44191 | 7.8 HIGH | Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution |
| CVE-2026-16544 | 6.5 MEDIUM | Awx: websocket eventconsumer missing authorization for inventory_update_events, project_up |
| CVE-2026-16560 | 5.3 MEDIUM | 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn |
| CVE-2026-16473 | 4.3 MEDIUM | Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame |
| CVE-2026-44187 | 3.3 LOW | Ansible-lightspeed: ansible lightspeed extension for visual studio code: information discl |
IV. Related Vulnerabilities
Same product: Red Hat Ansible Automation Platform 2
-
CVE-2026-103754
Ansible-runner: ansible-runner: path traversal and symlink e -
CVE-2026-90959
Pulpcore: pulpcore: file:// scheme allowlist bypass in conte -
CVE-2026-94416
Aap-gateway: aap-gateway: authorization bypass via workload -
CVE-2026-92091
Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate c -
CVE-2026-79699
Podman: buildah: skopeo: containers/storage: malicious tar w
Same vendor: Red Hat
-
CVE-2026-95512
Freetype: freetype: denial of service via repeated subroutin -
CVE-2026-86345
389-ds-base: 389-ds-base: starttls plaintext-buffer retentio -
CVE-2026-86344
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool -
CVE-2026-103884
Keycloak-services: keycloak-services: path traversal in x.50 -
CVE-2026-56098
Rubygem-katello: improper authorization logic allows resourc
Same weakness: CWE-22
-
CVE-2014-125130
CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File Read v -
CVE-2026-104853
Nx: Path traversal in nx migrate package-migrations extracti -
CVE-2026-103648
Improper Limitation of a Pathname to a Restricted Directory -
CVE-2026-104843
uv: Path traversal on Windows through wheel extraction -
CVE-2026-104721
Logback: Incomplete protection against CVE-2026-19880
V. Comments for CVE-2026-44192
No comments yet