https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:36:59 +0000 https://db.gcve.eu/vuln/bdu:2026-08693 bdu:2026-08693 https://db.gcve.eu/vuln/bdu:2026-08693 https://db.gcve.eu/vuln/cve-2026-11837 <p><strong>Affected:</strong> Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0</p> <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> <p><strong>Affected:</strong> Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0</p> <p>A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module&#39;s keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.</p> https://db.gcve.eu/vuln/cve-2026-11837