{"id":"CVE-2026-71465","title":"RunAdHocCommand.build_args() appends limit as bare\n              positional (args.append(limit)) instead of using\n              args.extend(['-l', limit]) like RunJob","summary":"RunAdHocCommand.build_args() appends limit as bare\n              positional (args.append(limit)) instead of using\n              args.extend(['-l', limit]) like RunJob. A limit beginning\n              with - is parsed as an ansible CLI op…","severity":"low","cvss":3.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-88"],"vendor":"Red Hat","product":"automation-controller","affected":["automation-controller (all versions)","automation-controller (all versions)","automation-controller (all versions)","ansible-automation-platform-26/controller-rhel9 (all versions)","ansible-automation-platform-27/controller-rhel9 (all versions)"],"published":"2026-09-23","updated":"2026-09-24","sourceUpdated":"2026-09-24T04:17:51.880","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-71465","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:71113","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:71114","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2026-71465","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2512375","label":"secalert@redhat.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-23T19:04:48.678853Z"},"ingestedAt":"2026-09-23T19:31:04.464Z","slug":"CVE-2026-71465","body":"## Overview\n\nRunAdHocCommand.build_args() appends limit as bare\n              positional (args.append(limit)) instead of using\n              args.extend(['-l', limit]) like RunJob. A limit beginning\n              with - is parsed as an ansible CLI option. Currently\n              limited to short-circuit flags (--version, --help) since\n              injected element displaces required pattern positional.\n              Would escalate if ansible-core ever defaults pattern.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":17,"depthScoreParts":{"impact":17.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}