CVE-2026-11819

Name of the Vulnerable Software and Affected Versions Ansible (affected versions not specified)

Description The plugins/modules/keyring info.py module retrieves passphrases from native operating system keyrings, such as GNOME Keyring, macOS Keychain, and Windows Credential Manager. The issue occurs because the module places the retrieved passphrase directly into the passphrase variable within the result without output suppression or no log protection. Consequently, sensitive data like master passwords, SSH key passphrases, and service credentials may be exposed in Ansible output, stored in fact caching backends such as Redis, JSON files, or memcached, and recorded in AWX or Tower job logs.

Recommendations Update the plugins/modules/keyring info.py module to use module.exit json(changed=False, passphrase=passphrase, ansible no log=True) to ensure output suppression. As a temporary mitigation, callers should use no log: true at the task level when utilizing this module.