redhat-leapp Ansible collection: manipulated Leapp report makes the controller copy its own files to a managed node

Impact

An attacker with privileged write access on a managed node can tamper with that node's Leapp report. When an operator then runs a remediation task driven by the report, the Ansible controller is induced to read its own local files and copy them to the managed node - an inversion of trust from the managed host back to the control node. The controller in a fleet-automation setup typically holds SSH private keys, vault secrets and credentials for every other node, so one compromised host can pull material that unlocks the rest, including GPU nodes and BMCs reached through the same automation. Requires an already-privileged foothold on a node plus an operator action, which is why it scores moderate rather than critical.

Who can reach it

Requires privileged write access to the Leapp report content on a managed node, and an operator subsequently running the affected remediation task from the controller. Not reachable by an unprivileged tenant.

What to do

Update ansible-collection-redhat-leapp on the controller for RHEL 9 and RHEL 10 (RHSA-2026:91490, RHSA-2026:91491). Controller-side package update only - no managed-node reboots and no GPU node disruption. If you ran report-driven remediation against a host you do not fully trust, treat controller-side secrets as potentially exposed and rotate them.

References

Related entries

• AMD TEE / ASP bootloader syscall input validation: Insufficient validation of syscall inputs in the AMD trustedCVE-2021-46759 · AMD TEE / ASP bootloader syscall input validationMedium
• HashiCorp Consul: Missing Content-Type header lets user input be reinterpretedCVE-2024-10086 · HashiCorp ConsulMedium
• Jenkins: agent-computed workspace browser URLs give a compromised agent stored XSS on the controllerCVE-2026-117621 · Jenkins core (workspace browser link URL computed on the agent)Medium
• Jenkins: agents can send HttpResponse-implementing exceptions to the controller, yielding XSSCVE-2026-117622 · Jenkins core (agent-to-controller exceptions implementing Stapler HttpResponse)Medium
• SPI flash configuration (flash descriptor / protected range registers) across multiple Intel platformsCVE-2017-5703 · SPI flash configuration (flash descriptor / protected range registers) across multiple Intel platformsMedium
• Intel Data Center GPU Max Series 1100 / 1550: An improper conditions check lets a privileged local user takeCVE-2023-47165 · Intel Data Center GPU Max Series 1100 / 1550Medium