Ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading…
- Exploited
- No known exploitation
- Fix
- No fix listed
- Who is exposed
- Not reported
- Last modified
- A 0-100 score for how much a CVE matters across the industry: exploitation, exposure, how widely the software is used, severity and whether a fix exists.What do these mean? →
- 22/100 · provisional
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Ansible-core's ansible.builtin.git module can be tricked into running arbitrary commands on the host when it is given a repository URL beginning with a dash, which git then reads as an option. An attacker needs local access and low-privileged login, and a user must take an action to trigger it.
Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them.
Read the original description
A flaw was found in ansible-core's ansible.builtin.git module. The module invokes git (ls-remote, clone, fetch) with the repository URL as a positional argument and without a "--" separator, so a repository URL that begins with a dash is interpreted by git as a command-line option. A caller that passes an attacker-controlled repository URL to the module can trigger argument injection (for example --upload-pack/--exec), resulting in arbitrary command execution on the host running the module.
cve.now Index
- Exploitation?/40Unknown. No CISA SSVC exploitation rating yet
- Exposure?/25Unknown. No advisory context yet
- Reach10/20Shipped in major Linux distributions
- Severity6.7/10CVSS 6.7
- No patch5/5No patch listed yet
What would change the score
- Would score about 77 if added to CISA KEV
- Would score about 72 if CISA's SSVC rates exploitation active
- Would score about 44 if advisories confirm default setups are exposed
Timeline
- CVE published
- First seen by cve.now
Affected versions
- mta/mta-rhel9-operator
Version range not reported
- migration-toolkit-virtualization/mtv-rhel9-operator
Version range not reported
- openshift-service-mesh/kiali-rhel9-operator
Version range not reported
- rhacm2/volsync-operator-bundle
Version range not reported
- rhacm2/volsync-rhel9
Version range not reported
- ansible-automation-platform-24/de-minimal-rhel8
Version range not reported
- ansible-automation-platform-24/de-minimal-rhel9
Version range not reported
- ansible-automation-platform-24/ee-minimal-rhel8
Version range not reported
Show all 78 packagesShow fewer packages
- ansible-automation-platform-24/ee-minimal-rhel9
Version range not reported
- ansible-automation-platform-24/hub-rhel8
Version range not reported
- ansible-automation-platform-24/lightspeed-rhel8
Version range not reported
- ansible-automation-platform-25/ansible-dev-tools-rhel8
Version range not reported
- ansible-automation-platform-25/de-minimal-rhel8
Version range not reported
- ansible-automation-platform-25/de-minimal-rhel9
Version range not reported
- ansible-automation-platform-25/eda-controller-rhel8
Version range not reported
- ansible-automation-platform-25/ee-minimal-rhel8
Version range not reported
- ansible-automation-platform-25/ee-minimal-rhel9
Version range not reported
- ansible-automation-platform-25/hub-rhel8
Version range not reported
- ansible-automation-platform-25/lightspeed-rhel8
Version range not reported
- ansible-automation-platform-26/ansible-dev-tools-rhel9
Version range not reported
- ansible-automation-platform-26/controller-rhel9-operator
Version range not reported
- ansible-automation-platform-26/de-minimal-rhel9
Version range not reported
- ansible-automation-platform-26/de-supported-rhel9
Version range not reported
- ansible-automation-platform-26/eda-controller-rhel9
Version range not reported
- ansible-automation-platform-26/eda-controller-rhel9-operator
Version range not reported
- ansible-automation-platform-26/ee-minimal-rhel9
Version range not reported
- ansible-automation-platform-26/ee-supported-rhel9
Version range not reported
- ansible-automation-platform-26/gateway-rhel9-operator
Version range not reported
- ansible-automation-platform-26/hub-rhel9
Version range not reported
- ansible-automation-platform-26/hub-rhel9-operator
Version range not reported
- ansible-automation-platform-26/lightspeed-rhel9
Version range not reported
- ansible-automation-platform-26/lightspeed-rhel9-operator
Version range not reported
- ansible-automation-platform-26/platform-resource-rhel9-operator
Version range not reported
- ansible-automation-platform-26/platform-resource-runner-rhel9
Version range not reported
- ansible-automation-platform-27/aap-cloud-billing-operator-rhel9
Version range not reported
- ansible-automation-platform-27/ansible-devspaces-rhel9
Version range not reported
- ansible-automation-platform-27/ansible-dev-tools-rhel9
Version range not reported
- ansible-automation-platform-27/controller-rhel9-operator
Version range not reported
- ansible-automation-platform-27/de-minimal-rhel9
Version range not reported
- ansible-automation-platform-27/de-supported-rhel9
Version range not reported
- ansible-automation-platform-27/eda-controller-rhel9
Version range not reported
- ansible-automation-platform-27/eda-controller-rhel9-operator
Version range not reported
- ansible-automation-platform-27/ee-minimal-rhel9
Version range not reported
- ansible-automation-platform-27/ee-supported-rhel9
Version range not reported
- ansible-automation-platform-27/gateway-rhel9-operator
Version range not reported
- ansible-automation-platform-27/hub-rhel9
Version range not reported
- ansible-automation-platform-27/hub-rhel9-operator
Version range not reported
- ansible-automation-platform-27/lightspeed-rhel9
Version range not reported
- ansible-automation-platform-27/lightspeed-rhel9-operator
Version range not reported
- ansible-automation-platform-27/metrics-service-rhel9-operator
Version range not reported
- ansible-automation-platform-27/platform-resource-rhel9-operator
Version range not reported
- ansible-automation-platform-27/platform-resource-runner-rhel9
Version range not reported
- ansible-automation-platform-tech-preview/ansible-devspaces-rhel9
Version range not reported
- ansible-automation-platform-tech-preview/metrics-service-rhel9-operator
Version range not reported
- ansible-core
Version range not reported
- ansible-automation-platform/ee-minimal-rhel8
Version range not reported
- ansible-automation-platform/ee-minimal-rhel9
Version range not reported
- ansible-automation-platform-tech-preview/ee-minimal-rhel8
Version range not reported
- ansible-automation-platform-tech-preview/ee-minimal-rhel9
Version range not reported
- rhcertification/redhat-certification-system-ai
Version range not reported
- discovery/discovery-server-rhel9
Version range not reported
- ansible-core
Version range not reported
- ansible-core
Version range not reported
- ansible-core
Version range not reported
- openshift4/ose-ansible-rhel9-operator
Version range not reported
- openshift5/ose-ansible-rhel9-operator
Version range not reported
- openstack-ansible-core
Version range not reported
- rhosp-rhel9/openstack-neutron-server
Version range not reported
- rhosp-rhel9/openstack-tripleoclient
Version range not reported
- rhoso-operators/ee-openstack-ansible-ee-rhel9
Version range not reported
- ansible-core
Version range not reported
- rhui5/installer-rhel9
Version range not reported
- rhui5/installer-tp-rhel9
Version range not reported
- rhui5/rhua-rhel9
Version range not reported
- rhui5/rhua-tp-rhel9
Version range not reported
- ansible-automation-platform/bootc-automation-portal-rhel9
Version range not reported
- stf/service-telemetry-rhel9-operator
Version range not reported
- stf/smart-gateway-rhel9-operator
Version range not reported
Evidence 2
- Report
- Link
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.