Tommaso Bona

**Name of the Vulnerable Software and Affected Versions** ansible-core (affected versions not specified) Red Hat Ansible Automation Platform (affected versions not specified) **Description** An argument injection flaw exists in the `ansible-galaxy role install` command. The issue occurs because dependency specifications from a role's `meta/requirements.yml` file are processed without proper neutralization of argument delimiters. A malicious role author can inject arbitrary git configuration flags through the `src` field, leading to arbitrary code execution on the machine of a user who installs the role. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.