VYPR
Moderate severityNVD Advisory· Published Dec 18, 2023· Updated Nov 20, 2025

Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files

CVE-2023-5115

Description

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
ansiblePyPI
< 8.5.08.5.0

Affected products

9

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.