Arbitrary File Write Vulnerability in Ansible FreeBSD Jail Connection Plugin
CVE-2026-55074

8.2HIGH

Key Information:

Vendor

Chofstede

Status
Ansible Jailexec
Vendor
CVE Published:
21 September 2026

What is CVE-2026-55074?

The Ansible FreeBSD Jail Connection Plugin has a vulnerability that enables an attacker to manipulate file transfers within FreeBSD jails. Using the jailexec connection plugin up to version 1.3.0, an attacker with control over content in a jail can create a symlink that causes a malicious file transfer to a location on the host system. This can lead to arbitrary root-owned writes on the host, effectively escaping the jail and compromising the system. It requires a specific sequence of actions during file transfers using the put_file command in Ansible tasks. This vulnerability has been addressed in version 2.0.0, which mitigates the exploits through improved path handling.

Affected Version(s)

ansible_jailexec < 2.0.0

References

https://github.com/chofstede/ansible_jailexec/security/ad...
x_refsource_CONFIRM
https://github.com/chofstede/ansible_jailexec/pull/6
x_refsource_MISC
https://github.com/chofstede/ansible_jailexec/commit/6e80...
x_refsource_MISC

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.