CVE-2024-8775 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging
Attackers can view sensitive secrets in logs when Ansible Vault variables are loaded without no_log enabled, exposing passwords and API keys.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-8775?
CVE-2024-8775 is a medium-severity vulnerability in Red Hat Ansible Automation Platform Execution Environments, published on 14 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.
Weakness: CWE-532
Which versions are affected by CVE-2024-8775?
5 open source packages ship an affected version, including ansible-core.
| Package | Affected | Fixed in |
|---|---|---|
ansible-core PyPI | All versions | 2.16.13, 2.17.6 |
ansible-core PyPI | All versions | 2.16.13 |
ansible-core PyPI | All versions | 2.16.13 |
ansible-core PyPI | From 2.17.0b1 | 2.17.6 |
ansible-core PyPI | From 2.17.0b1 | 2.17.6 |
Linux distribution packages (7)
ansible SUSE:Manager Client Tools 15 | All versions | 2.9.27-150000.1.20.1 |
spacewalk-client-tools SUSE:Manager Client Tools 15 | All versions | 4.3.22-150000.3.100.1 |
uyuni-proxy-systemd-services SUSE:Manager Client Tools 15 | All versions | 4.3.15-150000.1.30.1 |
uyuni-proxy-systemd-services SUSE:Manager Client Tools for SLE Micro 5 | All versions | 4.3.15-150000.1.30.1 |
ansible SUSE:Manager Proxy Module 4.3 | All versions | 2.9.27-150000.1.20.1 |
uyuni-proxy-systemd-services SUSE:Manager Proxy Module 4.3 | All versions | 4.3.15-150000.1.30.1 |
ansible openSUSE:Leap 15.6 | All versions | 2.9.27-150000.1.20.1 |
How do I fix CVE-2024-8775?
Upgrade ansible-core to a fixed version for your release line: 2.16.13 or 2.17.6.
Is CVE-2024-8775 being exploited?
There is no known exploitation of CVE-2024-8775 in the wild and no public exploit code.
Sources
Also known as AZL-53163, AZL-53180, DEBIAN-CVE-2024-8775, GHSA-jpxc-vmjf-9fcj, PYSEC-2026-1124, SUSE-RU-2025:0791-1 and 1 more.