The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Module: plugins/modules/keyring_info.py CVSS 3.1: 5.5 MEDIUM  AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue:
    The module retrieves a passphrase from the OS native keyring (GNOME Keyring, macOS Keychain, Windows     Credential Manager) and places it directly into result[passphrase] with no output suppression, no no_log     protection, and no documentation warning. Root Cause: Line 105 (protected):
    keyring_password=dict(type=str, required=True, no_log=True) Line 127 (NOT protected):
    result[passphrase] = passphrase Observed Output: { changed: false, passphrase:
    MyMasterP@ssw0rd!SSH_Key_Secret } Visible via register + debug: { keyring_result: { changed: false,     passphrase: MyMasterP@ssw0rd!SSH_Key_Secret } } Impact: Master passwords, SSH key passphrases and     service credentials appear in all Ansible output register: keyring_result followed by debug:
    var=keyring_result prints passphrase in full Ansible fact caching backends (Redis, JSON file, memcached)     may persist the passphrase AWX/Tower job logs silently store the live credential Fix:
    module.exit_json(changed=False, passphrase=passphrase, _ansible_no_log=True) Also add a documentation     warning requiring callers to use no_log: true at the task level. PoCs Fig 1: PoC execution showing     passphrase in plaintext output Fig 2: Source code showing no_log=True on input (line 105) vs unprotected     output (line 127) (CVE-2026-11819)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-11819

medium Nessus Plugin ID 325137

Version 1.2

Version 1.1

Version 1.2 Aug 14, 2026, 1:45 AM Detection (updated detection logic) Plugin Feed: 202608140145
Version 1.1 Jul 6, 2026, 4:58 AM New Plugin Feed: 202607060458