Homepage

Link Following The advisory has been revoked - it doesn't affect any version of package rhel-system-roles  (opens in a new tab)

Threat Intelligence

EPSS
0.16% (5th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL9-RHELSYSTEMROLES-17279754
  • published10 Jun 2026
  • disclosed10 Jun 2026
Report a new vulnerability Found a mistake?

Introduced: 10 Jun 2026

CVE-2026-11837  (opens in a new tab)
CWE-59  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream rhel-system-roles package and not the rhel-system-roles package as distributed by RHEL.

A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic links in their ~/.ssh directory to redirect file ownership changes to arbitrary system paths when an operator runs the authorized_key task as root, leading to local privilege escalation.