CVE-2021-4041

Name of the Vulnerable Software and Affected Versions ansible-runner (affected versions not specified)

Description A flaw was found in ansible-runner, where an improper escaping of the shell command, while calling the ansible runner.interface.run command, can lead to parameters getting executed as the host's shell command. This could allow a developer to unintentionally write code that gets executed in the host rather than the virtual environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.