https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:16:02.965963+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-ansible-cve-2014-3498 BREW-ansible-CVE-2014-3498 2026-10-02T23:16:02.971277+00:00

Affected: Homebrew: ansible

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.

 https://cve.radiocsirt.org/vuln/cve-2014-3498 CVE-2014-3498 2026-10-02T23:16:02.971321+00:00

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.

 https://cve.radiocsirt.org/vuln/ghsa-4cvm-5776-jx9f GHSA-4cvm-5776-jx9f — Ansible Arbitrary Code Execution 2026-10-02T23:16:02.971344+00:00

Affected: PyPI: ansible

User module in ansible before 1.6.6 is vulnerable to command execution. Ansible can get the result of remote command in variable, which may come from untrusted source of input. If the content of variable isn't properly filtered and when attempting to use the variable, it will trigger a function that passes it through jinja 2 template engine that can result into arbitrary command execution. Under certain circumstances, unprivileged user on system that is being managed via ansible can execute code on the managing host under UID of running ansible process.