PatchTheCEVCVE-2026-68563: A flaw was found in ansible-collection-redhat-leapp
25
Routine
MEDIUM 5.5WATCHLIST
CVE-2026-68563 is a medium-severity flaw (CVSS 5.5) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data` option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read sensitive archived PostgreSQL data, leading to information disclosure.
Why this priority
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 5.5 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 97%) |
| CISA exploited list | No |
| Weakness | CWE-732 |
| Published | 2026-07-30 |
| Last modified | 2026-10-23 |
Publisher (CNA): Red Hat, Inc.
Timeline
- Published CVE record published
- Updated Record last modified
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.