CVE-2026-44188

Name of the Vulnerable Software and Affected Versions Ansible Lightspeed (affected versions not specified)

Description An issue exists due to insufficient session expiration, allowing a remote attacker to maintain persistent access to the instance. If a valid OAuth (Open Authorization) access token is exfiltrated before a user logs out, the attacker can continue to authenticate and access sensitive data. This occurs because the application does not invalidate the token on the backend, leaving it active until its natural expiration. This can result in unauthorized read access to resources such as inventories, playbooks, and configuration data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.