CVE catalog
CVE-2025-14010
ansible: CVE-2025-14010
- Severity
- Medium · CVSS 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.19% · Oct 25, 2026
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | ansible | sid | 14.4.0+dfsg-1 | fixed |
| Debian | ansible | forky | 14.0.0+dfsg-1 | fixed |
| Debian | ansible | trixie | 12.0.0+dfsg-0+deb13u1 | fixed |
| Debian | ansible | bookworm | 7.7.0+dfsg-3+deb12u1 | not affected |
| PyPI | ansible | Not reported | 12.2.0 | fixed |
| Cpe | community.general | Not reported | Not reported | unknown |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | ansible | source | sid | 12.2.0+dfsg-1 | not yet assigned | Not reported | [1121951] |
| Debian | ansible | source | forky | 12.2.0+dfsg-1 | not yet assigned | Not reported | [1121951] |
| Debian | ansible | source | trixie | 12.0.0+dfsg-0+deb13u1 | not yet assigned | Not reported | [1121951] |
| Debian | ansible | source | bookworm | Not affected | unimportant | Not reported | [1121951] |
| PyPI | ansible | PyPI | Not reported | 12.2.0 | Not reported | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [ansible]Not affected
Details (2)
7.7.0+dfsg-3+deb12u1· all · bookwormNot affected
dsa · ansible · debian · bookworm
7.7.0+dfsg-3+deb12u1· all · bookwormNot affected
dsa · ansible · debian · bookworm
[Debian 13 (Trixie)]
- [ansible]Fixed
Details (2)
12.0.0+dfsg-0+deb13u1· all · trixieFixed · Fixed:
12.0.0+dfsg-0+deb13u1dsa · ansible · debian · 13
12.0.0+dfsg-0+deb13u1· all · trixieFixed · Fixed:
12.0.0+dfsg-0+deb13u1dsa · ansible · debian · 13
Observed:
References
- [https://nvd.nist.gov/vuln/detail/CVE-2025-14010]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-14010]
- [https://osv.dev/vulnerability/GHSA-8ggh-xwr9-3373]
- [https://osv.dev/vulnerability/PYSEC-2026-1119]
- [https://security-tracker.debian.org/tracker/CVE-2025-14010]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14010.json]
[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]