ansible-collection-redhat-leapp vulnerabilities
CVEs whose affected-version data names the ansible-collection-redhat-leapp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-68563Medium· 5.5Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissions
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data` option is selected, a PostgreSQL data backup archive is created with insecure permissio…
▾ SunlitRed Hat · ansible-collection-redhat-leappEPSS 0.11%via CVEORG
CVE-2026-68562Medium· 6.2Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure via leapp report tampering
A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can caus…
▾ SunlitRed Hat · ansible-collection-redhat-leappEPSS 0.25%via CVEORG