CVE-2026-71465 in Ansible Automation Platform
Resumen
por MITRE • 2026-09-23
RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob. A limit beginning
with - is parsed as an ansible CLI option. Currently limited to short-circuit flags (--version, --help) since injected element displaces required pattern positional. Would escalate if ansible-core ever defaults pattern.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.