CVE-2026-68563 - Information Disclosure in Ansible Collection Redhat Leapp
CVE-2026-68563 - Information Disclosure in Ansible Collection Redhat Leapp
CVE-2026-68563 describes an information disclosure vulnerability in ansible-collection-redhat-leapp related to insecure backup permissions for PostgreSQL data. A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leapp_old_postgresql_data option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read sensitive archived PostgreSQL data, leading to information disclosure. 🚨
This vulnerability was published on July 30, 2026, and is not remotely exploitable. The source of this information is secalert@redhat.com.
Affected Products
The following products are affected by CVE-2026-68563: Redhat Enterprise Linux.
CVSS Score
The CVSS 3.1 score is 5.5, rated as MEDIUM. One source provides an exploitability score of 1.8 and an impact score of 3.6. This CVE is associated with CWE-732: Incorrect Permission Assignment for Critical Resource.
Recommendations
To resolve this, organizations should restrict access to PostgreSQL backup archives by correcting file permissions. It is important to ensure backup archives have restrictive permissions, review and update the leapp_old_postgresql_data option usage, and apply necessary security updates for ansible-collection-redhat-leapp. 🔒
Common Attack Patterns
Common attack patterns related to this vulnerability include:
- CAPEC-1: Accessing Functionality Not Properly Constrained by ACLs.
- CAPEC-17: Using Malicious Files.
- CAPEC-60: Reusing Session IDs (aka Session Replay).
- CAPEC-61: Session Fixation.
- CAPEC-62: Cross Site Request Forgery.
- CAPEC-122: Privilege Abuse.
- CAPEC-127: Directory Indexing.
- CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels.
- CAPEC-206: Signing Malicious Code.
For more details, please Read full article.