The community.general keyring_info module extracts a passphrase from the operating system's native keyring and writes it directly into the result dictionary without applying no_log protection. When the module's output is logged, registered, or printed by Ansible, the clear‑text passphrase becomes visible to anyone with access to the playbook output, job logs, or fact caching backends. This leaks master passwords, SSH key passphrases, or other service credentials, compromising data confidentiality.

Red Hat Enterprise Linux 8, 9, and 10 when the community.general keyring_info module is invoked. The vulnerability is present in any environment that uses the module to read credentials from GNOME Keyring, macOS Keychain, or Windows Credential Manager.

The CVSS v3.1 score of 5.5 indicates a medium severity vulnerability with an AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N profile. No EPSS score is available and the issue is not listed in the CISA KEV catalog. The likely attack vector is local access to the Ansible control node or any node on which the module runs; the attacker must be able to execute the keyring_info task and capture its output. Because the credentials are simply printed, exploitation is straightforward once the required access is available, and the compromised secrets can persist in AWX/Tower logs or fact caching backends.