CVE-2026-68562

MediumCVSS 6.2

Published: 30/07/2026(UTC)Updated: 29/10/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

17th percentile - higher than 17% of all known CVEs

Summary

In the ansible-collection-redhat-leapp, an attacker with write access to a managed node can manipulate the Leapp report content. When an operator runs a specific remediation task, the manipulated report causes the Ansible controller to read its own local files and copy them to the managed node, leading to disclosure of sensitive data like private keys or credentials.

Risk Assessment

The organization risks exposure of sensitive controller-side data, including private keys and credentials, which could enable further attacks on the infrastructure.

Recommendation

Update the ansible-collection-redhat-leapp to a version that includes a fix preventing Leapp report manipulation.

Other vulnerabilities in ansible-collection-redhat-leapp

CVE-2026-68563Medium
In the ansible-collection-redhat-leapp, when a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data` option is selected, a PostgreSQL backup archive is created with insecure permissions. A local non-root user on the managed node can read sensitive archived data.

Original NVD description (English source)

A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can cause the Ansible controller to read its own local files and copy them to the managed node. This vulnerability leads to information disclosure, potentially exposing sensitive controller-side data such as private keys or credentials.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS