CVE-2026-68563

Name of the Vulnerable Software and Affected Versions ansible-collection-redhat-leapp (affected versions not specified)

Description A flaw exists when a remediation task is executed with elevated privileges and the leapp old postgresql data option is selected. This results in the creation of a PostgreSQL data backup archive with insecure permissions, allowing a local non-root user on the managed node to read sensitive archived PostgreSQL data, which leads to information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the leapp old postgresql data option during remediation tasks to minimize the risk of information disclosure.