CVE-2026-44187

Name of the Vulnerable Software and Affected Versions Ansible Lightspeed extension for Visual Studio Code (affected versions not specified)

Description An issue exists where the extension insecurely stores the Google Gemini API key in plain text within the user configuration file and writes it to output log files. This allows a local attacker or malware running with user privileges to read the API key, potentially leading to unauthorized use of the user's API quota.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.