Information Exposure Vulnerability in Ansible Collection by Red Hat
CVE-2025-14010

5.5MEDIUM

Key Information:

Vendor

Ansible-collections

Status
Ansible Community General Collection
Red Hat Ceph Storage 5
Red Hat Ceph Storage 6
Red Hat Ceph Storage 7
Vendor
CVE Published:
4 December 2025

What is CVE-2025-14010?

A vulnerability exists in the Ansible Collection provided by Red Hat, allowing sensitive credentials such as plaintext passwords to be exposed. When Ansible is run in debug mode or with verbose output, these credentials can appear in logs, making them accessible to attackers. If exploited, this could lead to the compromise of Keycloak accounts or gain unauthorized administrative access. Users are advised to assess their logging configurations and restrict access to any logs generated during Ansible runs to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Ansible Community General Collection 7.1.0 < 9.5.13

Ansible Community General Collection 10.0.0 < 10.7.6

Ansible Community General Collection 11.0.0 < 11.4.1

References

https://access.redhat.com/security/cve/CVE-2025-14010
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2418774
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Chris Conway for reporting this issue.
JSON
.