A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can cause the Ansible controller to read its own local files and copy them to the managed node. This vulnerability leads to information disclosure, potentially exposing sensitive controller-side data such as private keys or credentials.

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:91490 advisory.

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL     data via insecure backup permissions (CVE-2026-68563)

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure via Leapp     report tampering (CVE-2026-68562)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_91491 advisory.

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL     data via insecure backup permissions (CVE-2026-68563)

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure via Leapp     report tampering (CVE-2026-68562)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:91491 advisory.

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL     data via insecure backup permissions (CVE-2026-68563)

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure via Leapp     report tampering (CVE-2026-68562)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:91490 advisory.

    redhat.leapp Ansible collection that handles RHEL upgrades.

    Security Fix(es):

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL     data via insecure backup permissions (CVE-2026-68563)

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure via Leapp     report tampering (CVE-2026-68562)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:91491 advisory.

    redhat.leapp Ansible collection that handles RHEL upgrades.

    Security Fix(es):

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure of PostgreSQL     data via insecure backup permissions (CVE-2026-68563)

    * ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: Information disclosure via Leapp     report tampering (CVE-2026-68562)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
374192	RockyLinux 9 : ansible-collection-redhat-leapp (RLSA-2026:91490)	Nessus	Rocky Linux Local Security Checks	Local	medium
374066	Rocky Linux 10.2 [CIQ] Security Update: ansible-collection-redhat-leapp Multiple Vulnerabilities (crlsa-2026_91491)	Nessus	Rocky Linux Local Security Checks	Local	medium
374000	RockyLinux 10 : ansible-collection-redhat-leapp (RLSA-2026:91491)	Nessus	Rocky Linux Local Security Checks	Local	medium
373959	RHEL 9 : ansible-collection-redhat-leapp (RHSA-2026:91490)	Nessus	Red Hat Local Security Checks	Local	medium
373936	RHEL 10 : ansible-collection-redhat-leapp (RHSA-2026:91491)	Nessus	Red Hat Local Security Checks	Local	medium

Detections

Analytics

CVE-2026-68562

medium

Tenable Plugins

medium

medium

medium

medium

medium