Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-11332

Fixed in a distro release EPSS <1%CVSS 7.8

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.

Published 2026-06-05 · CVE record · OSV

Products: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Satellite 6.17 for RHEL 9, Red Hat Satellite 6.18 for RHEL 9, Red Hat Satellite 6.19 for RHEL 9, Red Hat Ansible Automation Platform 2.5, Red Hat Ansible Automation Platform 2.6, Red Hat Ansible Automation Platform 2.7, Red Hat Discovery 2, Red Hat OpenShift Container Platform 4.21, Red Hat Migration Toolkit for Applications 8, Red Hat Migration Toolkit for Virtualization, Red Hat OpenShift Service Mesh 3, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform Ansible Core 2, Red Hat Self-service automation portal 2, Red Hat Service Telemetry Framework 1.5, Red Hat OpenShift Container Platform 4

Fixed upstream

EcosystemPackageFixed in
PyPIansible-core2.16.19rc1
PyPIansible-core2.18.18rc1
PyPIansible-core2.19.11rc1
PyPIansible-core2.20.7rc1
PyPIansible-core2.21.1rc1

Distro releases

ReleasePackageFixed in
AlmaLinux 10ansible-core1:2.16.16-2.el10_2.1
AlmaLinux 10ansible-test1:2.16.16-2.el10_2.1
AlmaLinux 8ansible-core2.16.3-4.el8_10
AlmaLinux 8ansible-test2.16.3-4.el8_10
AlmaLinux 9ansible-core1:2.14.18-3.el9_8.1
AlmaLinux 9ansible-test1:2.14.18-3.el9_8.1
Debian 12ansible5.4.0-1
Debian 12ansible-coreno fix
Debian 13ansible5.4.0-1
Debian 13ansible-core2.19.11-0+deb13u1
Debian 14ansible5.4.0-1
Debian 14ansible-core2.21.1~rc1-1
Red Hat ansible automation platform 2.5ansible-core1:2.16.19-1.el9ap
Red Hat ansible automation platform 2.5ansible-core1:2.16.19-1.el8ap
Red Hat ansible automation platform 2.5ansible-test1:2.16.19-1.el8ap
Red Hat ansible automation platform 2.5ansible-test1:2.16.19-1.el9ap
Red Hat ansible automation platform 2.5automation-controller0:4.6.30-2.el8ap
Red Hat ansible automation platform 2.5automation-controller0:4.6.30-2.el9ap
Red Hat ansible automation platform 2.5automation-controller-cli0:4.6.30-2.el9ap
Red Hat ansible automation platform 2.5automation-controller-cli0:4.6.30-2.el8ap
Red Hat ansible automation platform 2.5automation-controller-server0:4.6.30-2.el9ap
Red Hat ansible automation platform 2.5automation-controller-server0:4.6.30-2.el8ap
Red Hat ansible automation platform 2.5automation-controller-ui0:4.6.30-2.el9ap
Red Hat ansible automation platform 2.5automation-controller-ui0:4.6.30-2.el8ap
Red Hat ansible automation platform 2.5automation-controller-venv-tower0:4.6.30-2.el8ap
Red Hat ansible automation platform 2.5automation-controller-venv-tower0:4.6.30-2.el9ap
Red Hat ansible automation platform 2.5automation-eda-controller0:1.1.20-1.el8ap
Red Hat ansible automation platform 2.5automation-eda-controller0:1.1.20-1.el9ap
Red Hat ansible automation platform 2.5automation-eda-controller-base0:1.1.20-1.el9ap
Red Hat ansible automation platform 2.5automation-eda-controller-base0:1.1.20-1.el8ap
Red Hat ansible automation platform 2.5automation-eda-controller-base-services0:1.1.20-1.el8ap
Red Hat ansible automation platform 2.5automation-eda-controller-base-services0:1.1.20-1.el9ap
Red Hat ansible automation platform 2.5automation-eda-controller-event-stream-services0:1.1.20-1.el9ap
Red Hat ansible automation platform 2.5automation-eda-controller-event-stream-services0:1.1.20-1.el8ap
Red Hat ansible automation platform 2.5automation-eda-controller-worker-services0:1.1.20-1.el8ap
Red Hat ansible automation platform 2.5automation-eda-controller-worker-services0:1.1.20-1.el9ap
Red Hat ansible automation platform 2.5automation-gateway0:2.5.20260715-1.el8ap
Red Hat ansible automation platform 2.5automation-gateway0:2.5.20260715-1.el9ap
Red Hat ansible automation platform 2.5automation-gateway-config0:2.5.20260715-1.el8ap
Red Hat ansible automation platform 2.5automation-gateway-config0:2.5.20260715-1.el9ap
Red Hat ansible automation platform 2.5automation-gateway-server0:2.5.20260715-1.el8ap
Red Hat ansible automation platform 2.5automation-gateway-server0:2.5.20260715-1.el9ap
Red Hat ansible automation platform 2.5automation-hub0:4.10.16-1.el8ap
Red Hat ansible automation platform 2.5automation-hub0:4.10.16-1.el9ap
Red Hat ansible automation platform 2.5python3.12-galaxy-ng0:4.10.16-1.el9ap
Red Hat ansible automation platform 2.5python3.12-galaxy-ng0:4.10.16-1.el8ap
Red Hat ansible automation platform 2.5python3.12-gitpython0:3.1.50-1.el8ap
Red Hat ansible automation platform 2.5python3.12-gitpython0:3.1.50-1.el9ap
Red Hat ansible automation platform 2.5python3.12-pulp-ansible1:0.25.6-1.el9ap
Red Hat ansible automation platform 2.5python3.12-pulp-ansible1:0.25.6-1.el8ap
Red Hat ansible automation platform 2.5python3.12-pulp-container0:2.19.12-1.el8ap
Red Hat ansible automation platform 2.5python3.12-pulp-container0:2.19.12-1.el9ap
Red Hat ansible automation platform 2.5python3.12-pulpcore0:3.49.63-2.el9ap
Red Hat ansible automation platform 2.5python3.12-pulpcore0:3.49.63-2.el8ap
Red Hat ansible automation platform 2.5python3.12-pyjwt0:2.13.0-1.el8ap
Red Hat ansible automation platform 2.5python3.12-pyjwt0:2.13.0-1.el9ap
Red Hat ansible automation platform 2.5python3.12-pyjwt+crypto0:2.13.0-1.el9ap
Red Hat ansible automation platform 2.5python3.12-pyjwt+crypto0:2.13.0-1.el8ap
Red Hat ansible automation platform 2.5python3.12-pysequoia0:0.1.34-1.el9ap
Red Hat ansible automation platform 2.5python3.12-pysequoia0:0.1.34-1.el8ap
Red Hat ansible automation platform 2.5python3.12-pysequoia-debuginfo0:0.1.34-1.el8ap
Red Hat ansible automation platform 2.5python3.12-pysequoia-debuginfo0:0.1.34-1.el9ap
Red Hat ansible automation platform 2.5python3.12-pysequoia-debugsource0:0.1.34-1.el8ap
Red Hat ansible automation platform 2.5python3.12-pysequoia-debugsource0:0.1.34-1.el9ap
Red Hat ansible automation platform 2.5python3.12-urllib30:2.7.0-1.el9ap
Red Hat ansible automation platform 2.5python3.12-urllib30:2.7.0-1.el8ap
Red Hat ansible automation platform 2.5receptor0:1.6.6-1.el9ap
Red Hat ansible automation platform 2.5receptor0:1.6.6-1.el8ap
Red Hat ansible automation platform 2.5receptor-debuginfo0:1.6.6-1.el9ap
Red Hat ansible automation platform 2.5receptor-debuginfo0:1.6.6-1.el8ap
Red Hat ansible automation platform 2.5receptor-debugsource0:1.6.6-1.el8ap
Red Hat ansible automation platform 2.5receptor-debugsource0:1.6.6-1.el9ap
Red Hat ansible automation platform 2.5receptorctl0:1.6.6-1.el9ap
Red Hat ansible automation platform 2.5receptorctl0:1.6.6-1.el8ap
Red Hat ansible automation platform 2.6ansible-core2:2.16.19-1.el10ap
Red Hat ansible automation platform 2.6ansible-core1:2.16.19-1.el9ap
Red Hat ansible automation platform 2.6automation-controller-venv-tower0:4.7.14-3.el9ap
Red Hat ansible automation platform 2.6automation-gateway-proxy0:2.6.17-1.el9ap
Red Hat ansible automation platform 2.6automation-gateway-proxy-debugsource0:2.6.17-1.el9ap
Red Hat ansible automation platform 2.6automation-gateway-proxy-server0:2.6.17-1.el9ap
Red Hat ansible automation platform 2.6automation-gateway-proxy-server-debuginfo0:2.6.17-1.el9ap
Red Hat ansible automation platform 2.6automation-platform-ui0:2.6.11-1.el9ap
Red Hat ansible automation platform 2.6python3.12-gitpython0:3.1.50-1.el9ap
Red Hat ansible automation platform 2.6python3.12-pulpcore0:3.49.63-2.el9ap
Red Hat ansible automation platform 2.6receptor0:1.6.6-1.el9ap
Red Hat ansible automation platform 2.6receptor0:1.6.6-1.el10ap
Red Hat ansible automation platform 2.7ansible-core2:2.16.19-1.el10ap
Red Hat ansible automation platform 2.7ansible-core1:2.16.19-1.el9ap
Red Hat ansible automation platform 2.7receptor0:1.6.6-1.el10ap
Red Hat ansible automation platform 2.7receptor0:1.6.6-1.el9ap
Red Hat ansible automation platform developer 2.5ansible-core1:2.16.19-1.el8ap
Red Hat ansible automation platform developer 2.5ansible-core1:2.16.19-1.el9ap
Red Hat ansible automation platform developer 2.5automation-controller0:4.6.30-2.el8ap
Red Hat ansible automation platform developer 2.5automation-controller0:4.6.30-2.el9ap
Red Hat ansible automation platform developer 2.5automation-controller-cli0:4.6.30-2.el9ap
Red Hat ansible automation platform developer 2.5automation-controller-cli0:4.6.30-2.el8ap
Red Hat ansible automation platform developer 2.5python3.12-urllib30:2.7.0-1.el9ap
Red Hat ansible automation platform developer 2.5python3.12-urllib30:2.7.0-1.el8ap
Red Hat ansible automation platform developer 2.5receptor0:1.6.6-1.el9ap
Red Hat ansible automation platform developer 2.5receptor0:1.6.6-1.el8ap
Red Hat ansible automation platform developer 2.5receptorctl0:1.6.6-1.el9ap
Red Hat ansible automation platform developer 2.5receptorctl0:1.6.6-1.el8ap
Red Hat ansible automation platform developer 2.6ansible-core2:2.16.19-1.el10ap
Red Hat ansible automation platform developer 2.6ansible-core1:2.16.19-1.el9ap
Red Hat ansible automation platform developer 2.6receptor0:1.6.6-1.el9ap
Red Hat ansible automation platform developer 2.7ansible-core2:2.16.19-1.el10ap
Red Hat ansible automation platform developer 2.7ansible-core1:2.16.19-1.el9ap
Red Hat ansible automation platform inside 2.5ansible-core1:2.16.19-1.el8ap
Red Hat ansible automation platform inside 2.5ansible-core1:2.16.19-1.el9ap
Red Hat ansible automation platform inside 2.5receptor0:1.6.6-1.el9ap
Red Hat ansible automation platform inside 2.5receptor0:1.6.6-1.el8ap
Red Hat ansible automation platform inside 2.5receptorctl0:1.6.6-1.el9ap
Red Hat ansible automation platform inside 2.5receptorctl0:1.6.6-1.el8ap
Red Hat ansible automation platform inside 2.6ansible-core1:2.16.19-1.el9ap
Red Hat ansible automation platform inside 2.6receptor0:1.6.6-1.el9ap
Red Hat ansible automation platform inside 2.7ansible-core1:2.16.19-1.el9ap
Red Hat ansible automation platform inside 2.7receptor0:1.6.6-1.el9ap
Red Hat Enterprise Linux 10.2ansible-core1:2.16.16-2.el10_2.1
Red Hat Enterprise Linux 10.2ansible-test1:2.16.16-2.el10_2.1
Red Hat Enterprise Linux 8ansible-core0:2.16.3-4.el8_10
Red Hat Enterprise Linux 8ansible-test0:2.16.3-4.el8_10
Red Hat Enterprise Linux 9ansible-core1:2.14.18-3.el9_8.1
Red Hat Enterprise Linux 9ansible-test1:2.14.18-3.el9_8.1
Red Hat Enterprise Linux eus 10.0ansible-core1:2.16.14-1.el10_0.1
Red Hat Enterprise Linux eus 10.0ansible-test1:2.16.14-1.el10_0.1
Red Hat rhel e4s 9.4ansible-core1:2.14.14-1.el9_4.1
Red Hat rhel e4s 9.4ansible-test1:2.14.14-1.el9_4.1
Red Hat rhel eus 9.6ansible-core1:2.14.18-1.el9_6.1
Red Hat rhel eus 9.6ansible-test1:2.14.18-1.el9_6.1
Red Hat satellite 6.17ansible-core1:2.16.19-1.el9sat
Red Hat satellite 6.17ansible-test1:2.16.19-1.el9sat
Red Hat satellite 6.17openvox-server0:8.15.2-1.el9sat
Red Hat satellite 6.17python-aiohttp0:3.14.3-1.el9pc
Red Hat satellite 6.17python-aiohttp-debugsource0:3.14.3-1.el9pc
Red Hat satellite 6.17python3.11-aiohttp0:3.14.3-1.el9pc
Red Hat satellite 6.17python3.11-aiohttp-debuginfo0:3.14.3-1.el9pc
Red Hat satellite 6.17rubygem-jwt0:2.10.3-1.el9sat
Red Hat satellite 6.18ansible-core1:2.16.19-1.el9sat
Red Hat satellite 6.18ansible-test1:2.16.19-1.el9sat
Red Hat satellite 6.18openvox-server0:8.15.2-1.el9sat
Red Hat satellite 6.18pulpcore-obsolete-packages0:1.3.1-5.el9pc
Red Hat satellite 6.18python3.12-aiohttp0:3.14.3-1.el9pc
Red Hat satellite 6.18python3.12-aiohttp-debuginfo0:3.14.3-1.el9pc
Red Hat satellite 6.18python3.12-aiohttp-debugsource0:3.14.3-1.el9pc
Red Hat satellite 6.18python3.12-pulpcore0:3.73.30-3.el9pc
Red Hat satellite 6.18rubygem-jwt0:2.10.3-1.el9sat
Red Hat satellite 6.19ansible-core1:2.16.19-1.el9sat
Red Hat satellite 6.19ansible-test1:2.16.19-1.el9sat
Red Hat satellite 6.19openvox-server0:8.15.2-1.el9sat
Red Hat satellite 6.19python3.12-aiohttp0:3.14.3-1.el9pc
Red Hat satellite 6.19python3.12-aiohttp-debuginfo0:3.14.3-1.el9pc
Red Hat satellite 6.19python3.12-aiohttp-debugsource0:3.14.3-1.el9pc
Red Hat satellite 6.19python3.12-gitpython0:3.1.59-1.el9pc
Red Hat satellite 6.19rubygem-jwt0:2.10.3-1.el9sat
Red Hat satellite capsule 6.17ansible-core1:2.16.19-1.el9sat
Red Hat satellite capsule 6.17ansible-test1:2.16.19-1.el9sat
Red Hat satellite capsule 6.17openvox-server0:8.15.2-1.el9sat
Red Hat satellite capsule 6.17python-aiohttp0:3.14.3-1.el9pc
Red Hat satellite capsule 6.17python-aiohttp-debugsource0:3.14.3-1.el9pc
Red Hat satellite capsule 6.17python3.11-aiohttp0:3.14.3-1.el9pc
Red Hat satellite capsule 6.17python3.11-aiohttp-debuginfo0:3.14.3-1.el9pc
Red Hat satellite capsule 6.17rubygem-jwt0:2.10.3-1.el9sat
Red Hat satellite capsule 6.18ansible-core1:2.16.19-1.el9sat
Red Hat satellite capsule 6.18ansible-test1:2.16.19-1.el9sat
Red Hat satellite capsule 6.18openvox-server0:8.15.2-1.el9sat
Red Hat satellite capsule 6.18pulpcore-obsolete-packages0:1.3.1-5.el9pc
Red Hat satellite capsule 6.18python3.12-aiohttp0:3.14.3-1.el9pc
Red Hat satellite capsule 6.18python3.12-aiohttp-debuginfo0:3.14.3-1.el9pc
Red Hat satellite capsule 6.18python3.12-aiohttp-debugsource0:3.14.3-1.el9pc
Red Hat satellite capsule 6.18python3.12-pulpcore0:3.73.30-3.el9pc
Red Hat satellite capsule 6.18rubygem-jwt0:2.10.3-1.el9sat
Red Hat satellite capsule 6.19ansible-core1:2.16.19-1.el9sat
Red Hat satellite capsule 6.19ansible-test1:2.16.19-1.el9sat
Red Hat satellite capsule 6.19openvox-server0:8.15.2-1.el9sat
Red Hat satellite capsule 6.19python3.12-aiohttp0:3.14.3-1.el9pc
Red Hat satellite capsule 6.19python3.12-aiohttp-debuginfo0:3.14.3-1.el9pc
Red Hat satellite capsule 6.19python3.12-aiohttp-debugsource0:3.14.3-1.el9pc
Red Hat satellite capsule 6.19python3.12-gitpython0:3.1.59-1.el9pc
Red Hat satellite capsule 6.19rubygem-jwt0:2.10.3-1.el9sat
Red Hat satellite maintenance 6.17ansible-core1:2.16.19-1.el9sat
Red Hat satellite maintenance 6.18ansible-core1:2.16.19-1.el9sat
Red Hat satellite maintenance 6.19ansible-core1:2.16.19-1.el9sat
Red Hat satellite utils 6.17rubygem-jwt0:2.10.3-1.el9sat
Red Hat satellite utils 6.18rubygem-jwt0:2.10.3-1.el9sat
Red Hat satellite utils 6.19rubygem-jwt0:2.10.3-1.el9sat
Rocky Linux 10ansible-core1:2.16.16-2.el10_2.1
Rocky Linux 8ansible-core0:2.16.3-4.el8_10
Rocky Linux 9ansible-core1:2.14.18-3.el9_8.1
SUSE Linux Enterprise Module for Package Hub 15 SP7ansible-core2.18.3-150400.9.14.1
SUSE Linux Enterprise Module for Package Hub 15 SP7ansible-core2.18.3-150400.9.17.1
SUSE Linux Enterprise Module for Systems Management 15 SP7ansible-core2.18.3-150400.9.14.1
SUSE Linux Enterprise Module for Systems Management 15 SP7ansible-core2.18.3-150400.9.17.1
SUSE Linux Enterprise Server 15 SP4-LTSSansible-core2.18.3-150400.9.17.1
SUSE Linux Enterprise Server 15 SP5-LTSSansible-core2.18.3-150400.9.17.1
SUSE Linux Enterprise Server 15 SP6-LTSSansible-core2.18.3-150400.9.17.1
SUSE Linux Enterprise Server 16.0ansible-core2.18.3-160000.4.1
SUSE Linux Enterprise Server 16.0ansible-core2.18.3-160000.3.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4ansible-core2.18.3-150400.9.17.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5ansible-core2.18.3-150400.9.17.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6ansible-core2.18.3-150400.9.17.1
SUSE Linux Enterprise Server for SAP applications 16.0ansible-core2.18.3-160000.3.1
SUSE Linux Enterprise Server for SAP applications 16.0ansible-core2.18.3-160000.4.1
Ubuntu 22.04 LTSansible-coreno fix
Ubuntu 24.04 LTSansibleno fix
Ubuntu 24.04 LTSansible-coreno fix
Ubuntu 25.10ansibleno fix
Ubuntu 25.10ansible-coreno fix
Ubuntu 26.04 LTSansibleno fix
Ubuntu 26.04 LTSansible-coreno fix
Ubuntu 26.10ansibleno fix
Ubuntu 26.10ansible-coreno fix
Ubuntu Pro 14.04 LTSansibleno fix
Ubuntu Pro 16.04 LTSansibleno fix
Ubuntu Pro 18.04 LTSansibleno fix
Ubuntu Pro 20.04 LTSansibleno fix
Ubuntu Pro 22.04 LTSansibleno fix
openSUSE Leap 16.0ansible-core2.18.3-160000.3.1
openSUSE Leap 16.0ansible-core2.18.3-160000.4.1
openSUSE Tumbleweedansible-core2.21.0-3.1
openSUSE Tumbleweedansible-core-2.182.18.18-1.1
openSUSE Tumbleweedansible-core-2.192.19.11-1.1
openSUSE Tumbleweedansible-core-2.202.20.7-1.1
openSUSE Tumbleweedansible-lint26.8.0-1.1
openSUSE Tumbleweedmolecule26.8.0-1.1
openSUSE Tumbleweedpython-ansible-compat26.8.0-1.1
openSUSE Tumbleweedpython-pytest-ansible26.8.0-1.1