CVE-2026-123037

A flaw exists in the ansible-core user module where the User.ssh_key_gen() function improperly handles symlinks when generate_ssh_key is enabled. While it guards individual key files, it only verifies the ~/.ssh directory using os.path.exists(). An unprivileged user on a managed node can replace ...

CVE-2026-123037

A flaw was found in the ansible-core user module. When generatesshkey is enabled, User.sshkeygen guards the key files against symlinks but checks the /.ssh directory only with os.path.exists. An unprivileged user on a managed node who replaces their /.ssh with a symlink to an existing root-writab...