AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-71465

Red Hat: argument injection

Red Hat

CVE-2026-71465 · Published Sep 23, 2026 · updated Nov 6, 2026

Low3.1
No fix yet
Red Hat advisory

RunAdHocCommand.build_args() appends limit as bare

positional (args.append(limit)) instead of using

args.extend(['-l', limit]) like RunJob. A limit beginning

with - is parsed as an ansible CLI option. Currently

limited to short-circuit flags (--version, --help) since

injected element displaces required pattern positional.

Would escalate if ansible-core ever defaults pattern.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references

More Red Hat advisories

All Red Hat