CVE-2026-44191

Name of the Vulnerable Software and Affected Versions Visual Studio Code Ansible Lightspeed (affected versions not specified)

Description An issue exists due to improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, which allows the injection of shell separators. This can be triggered automatically during Language Server initialization or manually when executing a playbook. Successful exploitation enables remote code execution (RCE) on the victim's machine with the privileges of the Visual Studio Code user, potentially leading to a complete system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.