Unrated

DEBIAN-CVE-2026-80158

Type: advisorySource: OSV1 source record

A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no_log, unlike the sibling password parameter in the same module. As a consequence, the supplied IPA/LDAP bind password is recorded in cleartext in the managed host's system journal/syslog (the module's "Invoked with" record), is included in the module's return values and verbose (-v) output, and is displayed in Automation Controller / AWX job output. The password is additionally passed on the command line to the ipa-getkeytab helper (as --bindpw ), exposing it in the process list to local users while the command runs. An attacker able to read these logs, job output, or the process table can obtain the directory bind credential, potentially compromising the accounts and objects that credential can access.

Announced 26 Aug 2026Source revision 1

Original source ↗

DEBIAN-CVE-2026-80158

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:DEBIAN-CVE-2026-80158

ansible

Source reference: /affected/0/package/name

Affected versions: 10.0.0+dfsg-1
Source reference: /affected/0/versions
10.0.1+dfsg-1
Source reference: /affected/0/versions
10.1.0+dfsg-1
Source reference: /affected/0/versions
10.5.0+dfsg-1
Source reference: /affected/0/versions
10.5.0+dfsg-2
Source reference: /affected/0/versions
10.6.0+dfsg-1
Source reference: /affected/0/versions
11.1.0+dfsg-1
Source reference: /affected/0/versions
11.2.0+dfsg-1
Source reference: /affected/0/versions
12.0.0+dfsg-1
Source reference: /affected/0/versions
12.0.0~a1+dfsg-1
Source reference: /affected/0/versions
12.0.0~a2+dfsg-1
Source reference: /affected/0/versions
12.0.0~a4+dfsg-1
Source reference: /affected/0/versions
12.0.0~a6+dfsg-1
Source reference: /affected/0/versions
12.0.0~b1+dfsg-1
Source reference: /affected/0/versions
12.0.0~b2+dfsg-1
Source reference: /affected/0/versions
12.0.0~b3+dfsg-1
Source reference: /affected/0/versions
12.0.0~b5+dfsg-1
Source reference: /affected/0/versions
12.2.0+dfsg-1
Source reference: /affected/0/versions
13.1.0+dfsg-1
Source reference: /affected/0/versions
13.4.0+dfsg-1
Source reference: /affected/0/versions
14.0.0+dfsg-1
Source reference: /affected/0/versions
14.0.0~a4+dfsg-1
Source reference: /affected/0/versions
14.4.0+dfsg-1
Source reference: /affected/0/versions
7.3.0+dfsg-1
Source reference: /affected/0/versions
7.7.0+dfsg-1
Source reference: /affected/0/versions
7.7.0+dfsg-2
Source reference: /affected/0/versions
7.7.0+dfsg-3
Source reference: /affected/0/versions
7.7.0+dfsg-3+deb12u1
Source reference: /affected/0/versions
9.4.0+dfsg-1
Source reference: /affected/0/versions
9.5.1+dfsg-1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

ansible

Source reference: /affected/1/package/name

Affected versions: 12.0.0+dfsg-0+deb13u1
Source reference: /affected/1/versions
12.0.0+dfsg-1
Source reference: /affected/1/versions
12.0.0~a6+dfsg-1
Source reference: /affected/1/versions
12.0.0~b1+dfsg-1
Source reference: /affected/1/versions
12.0.0~b2+dfsg-1
Source reference: /affected/1/versions
12.0.0~b3+dfsg-1
Source reference: /affected/1/versions
12.0.0~b5+dfsg-0+deb13u1
Source reference: /affected/1/versions
12.0.0~b5+dfsg-1
Source reference: /affected/1/versions
12.2.0+dfsg-1
Source reference: /affected/1/versions
13.1.0+dfsg-1
Source reference: /affected/1/versions
13.4.0+dfsg-1
Source reference: /affected/1/versions
14.0.0+dfsg-1
Source reference: /affected/1/versions
14.0.0~a4+dfsg-1
Source reference: /affected/1/versions
14.4.0+dfsg-1
Source reference: /affected/1/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

ansible

Source reference: /affected/2/package/name

Affected versions: 12.0.0+dfsg-1
Source reference: /affected/2/versions
12.0.0~a6+dfsg-1
Source reference: /affected/2/versions
12.0.0~b1+dfsg-1
Source reference: /affected/2/versions
12.0.0~b2+dfsg-1
Source reference: /affected/2/versions
12.0.0~b3+dfsg-1
Source reference: /affected/2/versions
12.0.0~b5+dfsg-1
Source reference: /affected/2/versions
12.2.0+dfsg-1
Source reference: /affected/2/versions
13.1.0+dfsg-1
Source reference: /affected/2/versions
13.4.0+dfsg-1
Source reference: /affected/2/versions
14.0.0+dfsg-1
Source reference: /affected/2/versions
14.0.0~a4+dfsg-1
Source reference: /affected/2/versions
14.4.0+dfsg-1
Source reference: /affected/2/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "ansible",
      "purl": "pkg:deb/debian/ansible?arch=source&distro=bookworm",
      "ecosystem": "Debian:12"
    },
    "versions": [
      "10.0.0+dfsg-1",
      "10.0.1+dfsg-1",
      "10.1.0+dfsg-1",
      "10.5.0+dfsg-1",
      "10.5.0+dfsg-2",
      "10.6.0+dfsg-1",
      "11.1.0+dfsg-1",
      "11.2.0+dfsg-1",
      "12.0.0+dfsg-1",
      "12.0.0~a1+dfsg-1",
      "12.0.0~a2+dfsg-1",
      "12.0.0~a4+dfsg-1",
      "12.0.0~a6+dfsg-1",
      "12.0.0~b1+dfsg-1",
      "12.0.0~b2+dfsg-1",
      "12.0.0~b3+dfsg-1",
      "12.0.0~b5+dfsg-1",
      "12.2.0+dfsg-1",
      "13.1.0+dfsg-1",
      "13.4.0+dfsg-1",
      "14.0.0+dfsg-1",
      "14.0.0~a4+dfsg-1",
      "14.4.0+dfsg-1",
      "7.3.0+dfsg-1",
      "7.7.0+dfsg-1",
      "7.7.0+dfsg-2",
      "7.7.0+dfsg-3",
      "7.7.0+dfsg-3+deb12u1",
      "9.4.0+dfsg-1",
      "9.5.1+dfsg-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-80158.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "ansible",
      "purl": "pkg:deb/debian/ansible?arch=source&distro=trixie",
      "ecosystem": "Debian:13"
    },
    "versions": [
      "12.0.0+dfsg-0+deb13u1",
      "12.0.0+dfsg-1",
      "12.0.0~a6+dfsg-1",
      "12.0.0~b1+dfsg-1",
      "12.0.0~b2+dfsg-1",
      "12.0.0~b3+dfsg-1",
      "12.0.0~b5+dfsg-0+deb13u1",
      "12.0.0~b5+dfsg-1",
      "12.2.0+dfsg-1",
      "13.1.0+dfsg-1",
      "13.4.0+dfsg-1",
      "14.0.0+dfsg-1",
      "14.0.0~a4+dfsg-1",
      "14.4.0+dfsg-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-80158.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "ansible",
      "purl": "pkg:deb/debian/ansible?arch=source&distro=forky",
      "ecosystem": "Debian:14"
    },
    "versions": [
      "12.0.0+dfsg-1",
      "12.0.0~a6+dfsg-1",
      "12.0.0~b1+dfsg-1",
      "12.0.0~b2+dfsg-1",
      "12.0.0~b3+dfsg-1",
      "12.0.0~b5+dfsg-1",
      "12.2.0+dfsg-1",
      "13.1.0+dfsg-1",
      "13.4.0+dfsg-1",
      "14.0.0+dfsg-1",
      "14.0.0~a4+dfsg-1",
      "14.4.0+dfsg-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-80158.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event: #58212 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 17:45:24 GMT
Publisher date: Wed, 26 Aug 2026 23:17:20 GMT

Read the original announcement