What’s Vulnerable › Vulnerabilities

CVE-2023-5115: Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-18 · updated 2026-06-17
• Weakness: CWE-36

Description

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.

Affected products

• Debian Linux: 10.0
• Red Hat Ansible Automation Platform: 1.2, 2.3, 2.4
• RedHat Ansible Developer: 1.0, 1.1
• RedHat Ansible Inside: 1.1, 1.2

References

• https://access.redhat.com/errata/RHSA-2023:5701
• https://access.redhat.com/errata/RHSA-2023:5758
• https://access.redhat.com/security/cve/CVE-2023-5115
• https://bugzilla.redhat.com/show_bug.cgi?id=2233810
• https://access.redhat.com/errata/RHSA-2023:5701
• https://access.redhat.com/errata/RHSA-2023:5758
• https://access.redhat.com/security/cve/CVE-2023-5115
• https://bugzilla.redhat.com/show_bug.cgi?id=2233810
• https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html

Get alerted when CVE-2023-5115 or the next vulnerability affects your stack