CVE-2026-44191

A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability (CWE-78) arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell separators. This can be triggered automatically during Language Server initialization or manually when executing a playbook. Successful exploitation leads to remote code execution (RCE) on the victim's machine with the privileges of the Visual Studio Code user, potentially resulting in a complete system compromise.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2026-44191
https://bugzilla.redhat.com/show_bug.cgi?id=2466761

Configurations

No configuration.

History

24 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Se encontró una falla en la extensión de Visual Studio Code Ansible Lightspeed. Esta vulnerabilidad de inyección de comandos (CWE-78) surge del manejo inadecuado de las configuraciones ansible.executionEnvironment.containerOptions y ansible.executionEnvironment.volumeMounts, permitiendo a un atacante inyectar separadores de shell. Esto puede ser activado automáticamente durante la inicialización del Language Server o manualmente al ejecutar un playbook. La explotación exitosa conduce a ejecución remota de código (RCE) en la máquina de la víctima con los privilegios del usuario de Visual Studio Code, lo que podría resultar en un compromiso completo del sistema.

Information

Published : 2026-07-22 13:16

Updated : 2026-10-24 17:10

NVD link : CVE-2026-44191

Mitre link : CVE-2026-44191

CVE.ORG link : CVE-2026-44191

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-44191", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44191", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-22T18:30:52.469921Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "ansible-automation-platform-25/ansible-dev-tools-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "ansible-automation-platform-26/ansible-dev-tools-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "ansible-dev-tools", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2026-07-22T13:16:37.367", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-44191", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466761", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability (CWE-78) arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell separators. This can be triggered automatically during Language Server initialization or manually when executing a playbook. Successful exploitation leads to remote code execution (RCE) on the victim's machine with the privileges of the Visual Studio Code user, potentially resulting in a complete system compromise."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en la extensi\u00f3n de Visual Studio Code Ansible Lightspeed. Esta vulnerabilidad de inyecci\u00f3n de comandos (CWE-78) surge del manejo inadecuado de las configuraciones ansible.executionEnvironment.containerOptions y ansible.executionEnvironment.volumeMounts, permitiendo a un atacante inyectar separadores de shell. Esto puede ser activado autom\u00e1ticamente durante la inicializaci\u00f3n del Language Server o manualmente al ejecutar un playbook. La explotaci\u00f3n exitosa conduce a ejecuci\u00f3n remota de c\u00f3digo (RCE) en la m\u00e1quina de la v\u00edctima con los privilegios del usuario de Visual Studio Code, lo que podr\u00eda resultar en un compromiso completo del sistema."}], "lastModified": "2026-10-24T17:10:00.220", "sourceIdentifier": "secalert@redhat.com"}