{"uuid": "e748dcbb-079b-4876-bc77-459111dd5531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55074", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mswc2xrsax2v", "content": "The ansible-jailexec FreeBSD connection plugin, through 1.3.0, resolved put_file destinations to + and ran mkdir -p and mv there as root on the host. Both follow symlinks, so a symlink inside the jail is followed outside it. CVE-2026-55074. #dev", "creation_timestamp": "2026-08-12T23:32:58.762536Z"}