PT-2026-48375 · Red Hat · Red Hat Enterprise Linux 10+4

Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-11837

NVD

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

A local privilege escalation vulnerability was found in the ansible.posix authorized key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized key task as root, leading to local privilege escalation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-11837

Affected Products

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Red Hat Openstack Platform 17.1

Red Hat Openstack Platform 18.0

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-11837 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2487424 · Note
• https://access.redhat.com/security/cve/CVE-2026-11837 · Note