Threats Tagged 'ghsa-j69q-g7fm-7qpm'

CVE-2026-71465 is a low severity vulnerability in Red Hat Ansible Automation Platform 2.5 for RHEL 8 involving improper neutralization of argument delimiters in command construction. The RunAdHocCommand.build_args() method appends the limit parameter as a bare positional argument rather than using a proper option flag, allowing a limit value starting with '-' to be interpreted as an Ansible CLI option. Currently, this is limited to short-circuit flags like --version or --help, but could escalate if ansible-core changes default behavior. A security update is available in Red Hat Ansible Automation Platform 2.6. The vendor advisory provides detailed remediation guidance and lists this issue among multiple fixed vulnerabilities.