Ansible vulnerabilities and fixes

CVEs that mention Ansible, ranked by priority. 3 tracked.

Ansible has 3 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2026-07-30. Highest priority: CVE-2026-48710 (score 86/100).

• CVE-2026-48710 MEDIUM 6.5 EXPLOITED UPGRADE UPGRADE Kludex Starlette HTTP Request/Response Smuggling Vulnerability
• CVE-2026-65923 MEDIUM 6.8 UPGRADE A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific
• CVE-2026-68563 MEDIUM 5.5 A flaw was found in ansible-collection-redhat-leapp

FAQ

How do I fix Ansible vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Ansible being exploited right now?

Yes: 1 Ansible CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which Ansible CVE should I patch first?

CVE-2026-48710 currently ranks highest (86/100): Kludex Starlette HTTP Request/Response Smuggling Vulnerability.

← Back to latest CVEs