This issue was discovered by Laura Pardo (Red Hat Inc.).

Ansible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expiration

Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execution via command injection in activation script setting

Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings

Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key

Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal

Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrary code execution via malicious playbook filename