A vulnerability identified as CVE-2025-14010 exists in the ansible-collection-community-general, allowing information exposure of plaintext passwords via verbose output when Ansible is executed with debug modes. This exposure could enable attackers with log access to retrieve sensitive credentials, potentially compromising Keycloak accounts or administrative privileges. The CVSS 3.1 base score is 5.5, reflecting a medium severity with local attack vector, low attack complexity, and requiring low privileges but no user interaction. The vulnerability is categorized under CWE-532 (Information Exposure Through Log Files). The vendor advisory from Red Hat does not provide explicit patch or remediation details, and no known exploits have been reported.

The vulnerability allows sensitive plaintext passwords to be exposed in verbose debug output logs. If an attacker gains access to these logs, they could retrieve credentials that may compromise Keycloak accounts or administrative access. The impact is limited to information disclosure without direct integrity or availability impact. The attack requires local access with low privileges and no user interaction, limiting remote exploitation potential.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid running Ansible with verbose debug modes in environments where log access is not strictly controlled. Restrict access to logs containing debug output to trusted personnel only. Monitor vendor advisories for updates or official patches addressing this vulnerability.