{"action":"Upgrade ansible-core to 2.16.14rc1 or later.","affected":[{"fixed":"2.16.14rc1","introduced":"0"},{"fixed":"2.17.7rc1","introduced":"2.17.0b1"},{"fixed":"2.18.1rc1","introduced":"2.18.0b1"}],"component":"ansible-core","cve_ids":["CVE-2024-11079"],"ecosystem":"PyPI","epss":0.00529,"exploited":false,"fixed_versions":["2.16.14rc1","2.17.7rc1","2.18.1rc1"],"ghsa_id":"GHSA-99w6-3xph-cx78","id":"tcs_01M5KGQQ6VY2TB7E8565FJ2VV0","modified_at":"2026-07-07T17:46:19.571846953Z","published_at":"2026-07-07T14:34:44.267867Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1123","https://nvd.nist.gov/vuln/detail/CVE-2024-11079","https://github.com/ansible/ansible/pull/84299","https://github.com/ansible/ansible/pull/84339","https://github.com/ansible/ansible/commit/2936b80dbbc7efb889934aeec80f6142c10266ce","https://github.com/ansible/ansible/commit/70e83e72b43e05e57eb42a6d52d01a4d9768f510","https://github.com/ansible/ansible/commit/98774d15d7748ebaaaf2e83942cc7e8d39f7280e","https://access.redhat.com/errata/RHSA-2024:10770","https://access.redhat.com/errata/RHSA-2024:11145","https://access.redhat.com/security/cve/CVE-2024-11079","https://bugzilla.redhat.com/show_bug.cgi?id=2325171","https://github.com/ansible/ansible","https://github.com/ansible/ansible/blob/v2.18.1/changelogs/CHANGELOG-v2.18.rst#security-fixes","https://lists.debian.org/debian-lts-announce/2026/03/msg00006.html","https://pypi.org/project/ansible-core","https://github.com/advisories/GHSA-99w6-3xph-cx78"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1123","url":"https://osv.dev/vulnerability/PYSEC-2026-1123"}],"summary":"Ansible-Core vulnerable to content protections bypass"}