{"@context":"https://openvex.dev/ns/v0.2.0","@id":"https://database.harborguard.co/cve/CVE-2026-11837/vex.json","author":"HarborGuard Database","role":"Document Creator","timestamp":"2026-06-15T21:32:45.562Z","version":1,"tooling":"HarborGuard Database (https://database.harborguard.co)","statements":[{"vulnerability":{"name":"CVE-2026-11837","@id":"https://www.cve.org/CVERecord?id=CVE-2026-11837","description":"A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation."},"products":[{"@id":"cpe:2.3:a:red_hat:red_hat_enterprise_linux_10:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:red_hat:red_hat_enterprise_linux_10:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:red_hat:red_hat_enterprise_linux_8:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:red_hat:red_hat_enterprise_linux_8:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:red_hat:red_hat_enterprise_linux_9:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:red_hat:red_hat_enterprise_linux_9:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:red_hat:red_hat_openstack_platform_17.1:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:red_hat:red_hat_openstack_platform_17.1:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:red_hat:red_hat_openstack_platform_18.0:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:red_hat:red_hat_openstack_platform_18.0:*:*:*:*:*:*:*:*"}}],"status":"affected","action_statement":"No fixed version is published yet; monitor the upstream advisory.","timestamp":"2026-06-15T21:32:45.562Z"}]}