CVE-2026-71465

Description

RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags (--version, --help) since injected element displaces required pattern positional. Would escalate if ansible-core ever defaults pattern.

Traduire en français

Produits concernés

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Red Hat Ansible Automation Platform 2.6 for RHEL 9
• Red Hat Ansible Automation Platform 2.6
• Red Hat Ansible Automation Platform 2.7

Scores CVSS

Faiblesses (CWE)

• CWE-88

Références

• https://access.redhat.com/errata/RHSA-2026:71113
• https://access.redhat.com/errata/RHSA-2026:71114
• https://access.redhat.com/errata/RHSA-2026:71177
• https://access.redhat.com/errata/RHSA-2026:71179
• https://access.redhat.com/security/cve/CVE-2026-71465
• https://bugzilla.redhat.com/show_bug.cgi?id=2512375

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories