CVE-2026-123037

A flaw exists in the ansible-core user module where the User.ssh_key_gen() function improperly handles symlinks when generate_ssh_key is enabled. While it guards individual key files, it only verifies the ~/.ssh directory using os.path.exists(). An unprivileged user on a managed node can replace ...