VDB
RHSA-2026:50850
RHSA-2026:50850
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/ansible-automation-platform/automation-portal@sha256:a85a548cb563a32be76c6e7e015fd57d340e068e321bf34b060d9eb901c33c4d_amd64 as a component of Red Hat Ansible Automation Platform 2.1 | * |
Timeline
- Aug 5, 2026 CVE Published
- Aug 25, 2026 CVE Updated
- Aug 25, 2026 Distribution Patch
- Aug 25, 2026 Distribution Patch
- Aug 25, 2026 Security Advisory
- Aug 25, 2026 Security Advisory
- Aug 25, 2026 Security Advisory
- Aug 25, 2026 Security Advisory
- Aug 25, 2026 Security Advisory
- Aug 25, 2026 Security Advisory
- Aug 25, 2026 Security Advisory
- Aug 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:50850 advisory
- https://access.redhat.com/security/cve/CVE-2026-43997 advisory
- https://access.redhat.com/security/cve/CVE-2026-43998 advisory
- https://access.redhat.com/security/cve/CVE-2026-43999 advisory
- https://access.redhat.com/security/cve/CVE-2026-44000 advisory
- https://access.redhat.com/security/cve/CVE-2026-44001 advisory
- https://access.redhat.com/security/cve/CVE-2026-44002 advisory
- https://access.redhat.com/security/cve/CVE-2026-44003 advisory
- https://access.redhat.com/security/cve/CVE-2026-44004 advisory
- https://access.redhat.com/security/cve/CVE-2026-44005 advisory
- https://access.redhat.com/security/cve/CVE-2026-44006 advisory
- https://access.redhat.com/security/cve/CVE-2026-44007 advisory
- https://access.redhat.com/security/cve/CVE-2026-44008 advisory
- https://access.redhat.com/security/cve/CVE-2026-44009 advisory
- https://access.redhat.com/security/cve/CVE-2026-45411 advisory
- https://access.redhat.com/security/cve/CVE-2026-47131 advisory
- https://access.redhat.com/security/cve/CVE-2026-47135 advisory
- https://access.redhat.com/security/cve/CVE-2026-47137 advisory
- https://access.redhat.com/security/cve/CVE-2026-47139 advisory
- https://access.redhat.com/security/cve/CVE-2026-47140 advisory
…and 129 more