Information Exposure Vulnerability in Ansible Collection by Red Hat

CVE-2025-14010

What is CVE-2025-14010?

A vulnerability exists in the Ansible Collection provided by Red Hat, allowing sensitive credentials such as plaintext passwords to be exposed. When Ansible is run in debug mode or with verbose output, these credentials can appear in logs, making them accessible to attackers. If exploited, this could lead to the compromise of Keycloak accounts or gain unauthorized administrative access. Users are advised to assess their logging configurations and restrict access to any logs generated during Ansible runs to mitigate potential risks.

References