CVE-2026-44190

The CVE concerns the Ansible Lightspeed Visual Studio Code extension. A Command Injection (CWE-78) arises from the ansible.python.activationScript setting, which is meant for a virtual environment activation script but does not properly validate the input as a file path. Triggering this via a spe...

PT-2026-63364

Name of the Vulnerable Software and Affected Versions Ansible Lightspeed Visual Studio Code extension affected versions not specified Description A command injection flaw exists where the extension fails to properly validate user input as a file path within the ansible.python.activationScript...