Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-10 | 3 | Disclosure3 |
| 2026-06-11 | 1 | Disclosure1 |
There is a new vulnerability with elevated criticality in Red Hat Enterprise Linux and OpenStack Platform (CVE-2026-11837) https://vuldb.com/vuln/370121
Post summary
The tweet announces a newly discovered, highly critical vulnerability (CVE‑2026‑11837) impacting Red Hat Enterprise Linux and OpenStack Platform.
🚨*CVE* CVE-2026-11837 A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown(… https://www.cve.org/CVERecord?id=CVE-2026-11837 ----- Traducción: CVE-2026-11837 Se … http://infoflow.cloud`
Post summary
The notice announces CVE-2026-11837, a local privilege escalation flaw in Ansible’s authorized_key module due to misuse of os.chown, without any PoC, exploit, or patch details.
CVE-2026-11837 A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown(… https://www.cve.org/CVERecord?id=CVE-2026-11837
Post summary
A local privilege escalation vulnerability (CVE‑2026‑11837) in the ansible.posix authorized_key module has been disclosed, detailing that the keyfile() function incorrectly uses os.chown() instead of os.lchown().
CVE-2026-11837 Local Privilege Escalation in Ansible.posix Authorized_key Module via Symlink Attack https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11837
Post summary
CVE‑2026‑11837 is disclosed as a local privilege escalation vulnerability in the Ansible.posix authorized_key module that exploits a symlink attack, with a reference link to a vulnerability database.