https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 01:15:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-339867 EUVD-2026-339867 https://cve.radiocsirt.org/vuln/euvd-2026-339867 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44190 <p>A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to execute unauthorized commands on a user&#39;s system. The issue occurs because the `ansible.python.activationScript` setting, intended for a virtual environment activation script, does not properly validate user input as a file path. If a user opens or executes a specially crafted project, an attacker could exploit this to gain complete control over the user&#39;s system with the privileges of the Visual Studio Code application.</p> <p>A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to execute unauthorized commands on a user&#39;s system. The issue occurs because the `ansible.python.activationScript` setting, intended for a virtual environment activation script, does not properly validate user input as a file path. If a user opens or executes a specially crafted project, an attacker could exploit this to gain complete control over the user&#39;s system with the privileges of the Visual Studio Code application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44190 https://cve.radiocsirt.org/vuln/ghsa-6hm5-xxgq-f387 <p>A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to execute unauthorized commands on a user&#39;s system. The issue occurs because the `ansible.python.activationScript` setting, intended for a virtual environment activation script, does not properly validate user input as a file path. If a user opens or executes a specially crafted project, an attacker could exploit this to gain complete control over the user&#39;s system with the privileges of the Visual Studio Code application.</p> <p>A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to execute unauthorized commands on a user&#39;s system. The issue occurs because the `ansible.python.activationScript` setting, intended for a virtual environment activation script, does not properly validate user input as a file path. If a user opens or executes a specially crafted project, an attacker could exploit this to gain complete control over the user&#39;s system with the privileges of the Visual Studio Code application.</p> https://cve.radiocsirt.org/vuln/ghsa-6hm5-xxgq-f387