A link-following flaw exists in the authorized_key module of the ansible.posix collection, allowing an unprivileged local user to create or overwrite files in directories they do not own by replacing their ~/.ssh directory with a symlink. When an operator runs the authorized_key task as root, the module follows the symlink and writes files to the attacker-controlled location. This does not allow privilege escalation but can impact system integrity and availability, for example by disrupting package management. Exploitation requires local access and running the task as root against the symlinked path. Red Hat rates the impact as low.