Ansible · Ansible-Vault · CVE-2017-2809
**Name of the Vulnerable Software and Affected Versions**
ansible-vault versions prior to 1.0.5
**Description**
The issue concerns the yaml loading functionality, where a specially crafted vault can execute arbitrary python commands, resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.
**Recommendations**
For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue.