https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 23:53:33 +0000 https://vulnerability.circl.lu/vuln/cve-2026-11837 <p><strong>Affected:</strong> Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0</p> <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> <p><strong>Affected:</strong> Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0</p> <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> https://vulnerability.circl.lu/vuln/cve-2026-11837 https://vulnerability.circl.lu/vuln/ghsa-49qh-h4vj-mrgf <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> https://vulnerability.circl.lu/vuln/ghsa-49qh-h4vj-mrgf