A vulnerability identified as CVE-2025-14010 affects the Ansible Community General Collection, allowing information exposure of sensitive plaintext passwords via verbose output when Ansible is executed with debug modes enabled. This issue is classified under CWE-532 (Exposure of Sensitive Information Through Log Files). The vulnerability has a CVSS 3.1 base score of 5.5 (medium severity), with an attack vector of local access (AV:L), low attack complexity (AC:L), requiring low privileges (PR:L), no user interaction (UI:N), unchanged scope (S:U), and high confidentiality impact (C:H) but no integrity or availability impact. The flaw could enable attackers with access to debug logs to retrieve credentials and potentially compromise Keycloak or administrative accounts. The affected versions include 7.1.0, 10.0.0, 11.0.0, and 12.0.0 of the collection. The Red Hat advisory linked does not specify patch or mitigation details.

The vulnerability allows exposure of plaintext passwords in debug logs, which can lead to unauthorized access to Keycloak accounts or administrative privileges if an attacker can access these logs. There is no reported impact on integrity or availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the Red Hat vendor advisory at https://access.redhat.com/security/cve/CVE-2025-14010 for current remediation guidance. Until a patch or official fix is available, avoid running Ansible with verbose debug modes in environments where logs may be accessible to unauthorized users. Restrict access to logs containing debug output to trusted personnel only.