VULNERABILITY INTELLIGENCE
CVE-2024-11079
CVSS score5.5 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2024-11-12
Last modified2026-06-30
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Description
A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.
Weakness classification
- CWE-20: Improper Input Validation