https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:06:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-08693 bdu:2026-08693 https://cve.radiocsirt.org/vuln/bdu:2026-08693 https://cve.radiocsirt.org/vuln/euvd-2026-365476 EUVD-2026-365476 https://cve.radiocsirt.org/vuln/euvd-2026-365476 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11837 <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-11837 https://cve.radiocsirt.org/vuln/ghsa-49qh-h4vj-mrgf <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-49qh-h4vj-mrgf https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-11837 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ansible, Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:22.04:LTS: ansible-core, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:24.04:LTS: ansible-core, Ubuntu:25.10: ansible, Ubuntu:25.10: ansible-core and 2 more</p> <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ansible, Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:22.04:LTS: ansible-core, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:24.04:LTS: ansible-core, Ubuntu:25.10: ansible, Ubuntu:25.10: ansible-core and 2 more</p> <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-11837