CVE-2026-44192

Name of the Vulnerable Software and Affected Versions Ansible Lightspeed Model Context Protocol (MCP) server (affected versions not specified)

Description A path traversal flaw exists in the Ansible Lightspeed Model Context Protocol (MCP) server. This issue allows an attacker to manipulate an AI agent via indirect prompt injection, which is a technique where malicious instructions are embedded in data that the AI processes. This manipulation can force the server to write files to unauthorized locations on the user's system, potentially exposing sensitive host information and allowing the execution of malicious commands, which could lead to a full system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.