CVE-2021-4041

2022-08-2415:11:13

CWE-20

redhat

www.cve.org

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.4%

JSON

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansible_runner.interface.run_command, can lead to parameters getting executed as host’s shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual environment.

CNA Affected

[
  {
    "product": "ansible-runner",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in ansible-runner 2.1.0"
      }
    ]
  }
]