ReleaseBytes
ansible Ansible Core Releases · · 2.18.18

Ansible 2.18.18 Security Fixes

securityinfraengineer
security patch

Ansible version 2.18.18 includes a security fix for ansible-galaxy install to prevent arbitrary git configuration injection in role dependencies. This addresses a vulnerability where malicious role authors could exploit role requirements. The fix ensures requirements are passed as positional arguments to git clone, protecting users from potential exploits.

Security (1) ›
  • Fix for arbitrary git configuration injection in ansible-galaxy

    A security fix has been implemented for ansible-galaxy install to ensure role requirements are passed as positional arguments to `git clone`. This mitigates a vulnerability where a malicious role author could inject arbitrary git configuration in role dependencies. (CVE-2026-11332)

Read the original announcement →

https://github.com/ansible/ansible/releases/tag/v2.18.18

Related releases