← All credits

Red Hat would like to thank Liqiang Ji (SQUARE Research Group, Institute of Software, Chinese Academy of Sciences (ISCAS)) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

CVE-2026-103754
Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory
CVE-2026-71364
Awx: project archive extraction allows path traversal file writes