CVE record · 1 source
CVE-2026-103869
CVSS 6.5A flaw was found in pulp-ansible's bearer-token refresh for collection remotes.
- Vendor
- Red Hat
- Product
- Ansible
- CVSS
- 6.5
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A flaw was found in pulp-ansible's bearer-token refresh for collection remotes.
A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for every token download in that worker. A user who can sync an Ansible remote that…