This vulnerability involves an externally controlled reference to a resource in another sphere within the ansible-collection-redhat-leapp. An attacker who has privileged write access to a managed node's Leapp report can craft the report to cause the Ansible controller to read local files on the controller system and copy them to the managed node during remediation tasks. This results in information disclosure of sensitive data stored on the controller side. The CVSS 3.1 base score is 6.2, reflecting a medium severity with network attack vector, low attack complexity, high privileges required, user interaction required, scope changed, and high confidentiality impact.

The vulnerability can lead to information disclosure by exposing sensitive files from the Ansible controller to a managed node. This may include private keys or credentials stored on the controller, which could compromise the security of the automation environment and potentially other connected systems. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-68562 for current remediation guidance. Until an official fix is available, restrict privileged write access on managed nodes to trusted users only to reduce the risk of exploitation. Operators should be cautious when running remediation tasks involving Leapp reports from managed nodes with potentially untrusted content.