CVE-2026-11332

Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

State: Published
Severity: 7.8 High
Published: Jun 5, 2026
Updated: Oct 31, 2026
Reserved: Jun 5, 2026

Description

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	redhat
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	redhat-SADP

Weaknesses

CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected Products

Product	Versions
Red Hat Ansible Automation Platform 2.5 for RHEL 8Red Hat	1:2.16.19-1.el8ap and laterNot affected
Red Hat Ansible Automation Platform 2.5 for RHEL 9Red Hat	1:2.16.19-1.el9ap and laterNot affected
Red Hat Ansible Automation Platform 2.6 for RHEL 10Red Hat	2:2.16.19-1.el10ap and laterNot affected
Red Hat Ansible Automation Platform 2.6 for RHEL 9Red Hat	1:2.16.19-1.el9ap and laterNot affected
Red Hat Ansible Automation Platform 2.7 for RHEL 10Red Hat	2:2.16.19-1.el10ap and laterNot affected
Red Hat Ansible Automation Platform 2.7 for RHEL 9Red Hat	1:2.16.19-1.el9ap and laterNot affected
Red Hat Enterprise Linux 10Red Hat	1:2.16.16-2.el10_2.1 and laterNot affected
Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat	1:2.16.14-1.el10_0.1 and laterNot affected
Red Hat Enterprise Linux 8Red Hat	0:2.16.3-4.el8_10 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	1:2.14.18-3.el9_8.1 and laterNot affected
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat	1:2.14.14-1.el9_4.1 and laterNot affected
Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat	1:2.14.18-1.el9_6.1 and laterNot affected
Red Hat Satellite 6.17 for RHEL 9Red Hat	1:2.16.19-1.el9sat and laterNot affected
Red Hat Satellite 6.18 for RHEL 9Red Hat	1:2.16.19-1.el9sat and laterNot affected
Red Hat Satellite 6.18 for RHEL 9Red Hat	0:1.3.1-5.el9pc and laterNot affected
Red Hat Satellite 6.18 for RHEL 9Red Hat	0:3.73.30-3.el9pc and laterNot affected
Red Hat Satellite 6.19 for RHEL 9Red Hat	1:2.16.19-1.el9sat and laterNot affected
Red Hat Ansible Automation Platform 2.5Red Hat	1785381341 and laterNot affected
Red Hat Ansible Automation Platform 2.5Red Hat	1785429657 and laterNot affected
Red Hat Ansible Automation Platform 2.5Red Hat	1785430174 and laterNot affected
Red Hat Ansible Automation Platform 2.5Red Hat	1785425335 and laterNot affected
Red Hat Ansible Automation Platform 2.5Red Hat	1785449441 and laterNot affected
Red Hat Ansible Automation Platform 2.6Red Hat	1785647559 and laterNot affected
Red Hat Ansible Automation Platform 2.6Red Hat	1785649812 and laterNot affected
Red Hat Ansible Automation Platform 2.6Red Hat	1785633038 and laterNot affected
Red Hat Ansible Automation Platform 2.6Red Hat	1785775360 and laterNot affected
Red Hat Ansible Automation Platform 2.7Red Hat	1785446384 and laterNot affected
Red Hat Ansible Automation Platform 2.7Red Hat	1785448519 and laterNot affected
Red Hat Ansible Automation Platform 2.7Red Hat	1785374869 and laterNot affected
Red Hat Ansible Automation Platform 2.7Red Hat	1785375273 and laterNot affected
Red Hat Ansible Automation Platform 2.7Red Hat	1792138710 and laterNot affected
Red Hat Discovery 2Red Hat	1784821670 and laterNot affected
Red Hat OpenShift Container Platform 4.21Red Hat	1791981285 and laterNot affected
Migration Toolkit for Applications 8Red Hat
Migration Toolkit for VirtualizationRed Hat
Migration Toolkit for VirtualizationRed Hat
OpenShift Service Mesh 3Red Hat
Red Hat Advanced Cluster Management for Kubernetes 2Red Hat
Red Hat Advanced Cluster Management for Kubernetes 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform 2Red Hat
Red Hat Ansible Automation Platform Ansible Core 2Red Hat
Red Hat Ansible Automation Platform Ansible Core 2Red Hat
Red Hat Ansible Automation Platform Ansible Core 2Red Hat
Red Hat Ansible Automation Platform Ansible Core 2Red Hat
Red Hat OpenShift Container Platform 5Red Hat
Self-service automation portal 2Red Hat
Service Telemetry Framework 1.5Red Hat
Service Telemetry Framework 1.5Red Hat

References

RHSA-2026:42078vendor-advisory
RHSA-2026:42079vendor-advisory
RHSA-2026:42080vendor-advisory
RHSA-2026:46836vendor-advisory
RHSA-2026:50340vendor-advisory
RHSA-2026:50344vendor-advisory
RHSA-2026:50357vendor-advisory
RHSA-2026:50479vendor-advisory
RHSA-2026:57148vendor-advisory
RHSA-2026:57149vendor-advisory
RHSA-2026:63385vendor-advisory
RHSA-2026:63386vendor-advisory
RHSA-2026:63387vendor-advisory
RHSA-2026:66248vendor-advisory
RHSA-2026:67465vendor-advisory
RHSA-2026:67466vendor-advisory
RHSA-2026:67467vendor-advisory
RHSA-2026:83703vendor-advisory
RHSA-2026:87124vendor-advisory
https://access.redhat.com/security/cve/CVE-2026-11332vdb-entry
RHBZ#2485379issue-tracking
https://github.com/ansible/ansible
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11332.json

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.