ansible-core: git argument injection in ansible-galaxy collection install yields command execution

Impact

_extract_collection_from_git() builds git clone command lines without a -- end-of-options separator, so a collection source URI can smuggle git options that git then executes. On a fleet control node this is the worst possible place for arbitrary command execution: that host normally holds the SSH keys, kubeconfigs and BMC credentials for every GPU node, so code running as the ansible user inherits reach across the whole fleet. The same applies to CI runners that materialize requirements.yml before a rollout. Red Hat notes this is an incomplete fix for CVE-2026-11332, which hardened the role install path and missed the collection path.

Who can reach it

No authentication against the target. Requires user or pipeline interaction: an operator or CI job runs ansible-galaxy collection install against a source URI the attacker influences - a crafted requirements.yml in a pull request, an internal mirror, or a shared collection source. Execution lands locally in the context of the invoking user.

What to do

Update ansible-core wherever galaxy installs are run: control nodes, bastion hosts, CI/CD images, and Automation Platform hubs. Red Hat has shipped errata (RHSA-2026:63385/63386/63387) covering RHEL 8/9/10, AAP 2 and Satellite 6.17-6.19; the record does not name a specific upstream fixed version, so take the version from your distribution's erratum. No daemon restart or node reboot is involved - it is a package update on the automation hosts. Until patched, treat requirements.yml git sources as untrusted input and pin them to reviewed internal mirrors.

References

Related entries

• MUNGE (munged credential daemon): This is the root of trust under Slurm. A crafted message with an oversizedCVE-2026-25506 · MUNGE (munged credential daemon)High
• VMware Avi Load Balancer: local user can escalate to root on the applianceCVE-2026-47868 · VMware Avi Load Balancer (Controller and Service Engine appliance)High
• Linuxfabrik monitoring plugins: pipe injection in shell_exec escalates a check account to rootCVE-2026-55426 · Linuxfabrik Monitoring Plugins / linuxfabrik-lib (lib.shell.shell_exec)High
• SonicWall SMA1000: authenticated admin can inject OS commands through the management consoleCVE-2026-83549 · SonicWall SMA1000 appliance (Appliance Management Console, OS command injection)High
• CyberPower PowerPanel managed devices - shared device certificates: Every managed device uses an identical certificateCVE-2024-31410 · CyberPower PowerPanel managed devices - shared device certificatesHigh
• Keycloak: SAML signature scope determined by position, not ReferenceCVE-2024-8698 · KeycloakHigh