SUSE-SU-2026:5185-1: Security update for ansible-core

Q: Who is exposed to this issue?

Users who run ansible-galaxy and can be persuaded to install a malicious collection are exposed. Successful exploitation affects the control node and runs with the privileges of the user running ansible-galaxy.

Q: What does an attacker need to exploit it?

The attacker needs to get a victim to install a malicious collection. The provided information does not indicate that exploitation occurs without this user action.

Q: What is the impact of installing a malicious collection?

A malicious collection can overwrite arbitrary files with the privileges of the user running ansible-galaxy, which can lead to code execution on the control node.

Published Nov 10, 2026

Updated

This update for ansible-core fixes the following issues:

- CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running ansible-galaxy, leading to code execution on the control node (bsc#1284847).