CVE-2026-126644

A link-following flaw was found in the authorizedkey module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the final path component os.chown with followsymlinks=False and ONOFOLLOW in safeopenwrite. When an unprivileged local user replaces their /.ss...