Description
A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the user's system. This can result in the exposure of sensitive host information and enable the attacker to execute malicious commands, potentially leading to a full system compromise.
Published: 2026-07-22
Score: 6.6 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a path traversal flaw in the Ansible Lightspeed MCP server that enables an attacker to manipulate AI prompts and cause the server to write files to unintended locations. By forging prompt injection payloads, an attacker can place files on the host system and potentially execute malicious commands, resulting in a full compromise of the afflicted machine and exposure of sensitive data.

Affected Systems

The flaw affects Red Hat Ansible Automation Platform 2 installations that include the Lightspeed MCP server. No specific patch version is listed; the vulnerability applies to any deployment of the product as of the advisory release.

Risk and Exploitability

The CVSS base score of 6.6 indicates medium severity. The EPSS score is below 1%, reflecting a low probability of exploitation currently, and the vulnerability is not listed in the CISA KEV catalog. An attacker would need to reach the MCP server and craft a prompt injection request, which could be done over the network if the server is exposed. Because no effective official workaround exists, limiting external exposure and monitoring traffic are critical mitigation measures.

Generated by OpenCVE AI on August 3, 2026 at 23:53 UTC.

Remediation

Vendor Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

OpenCVE Recommended Actions

  • Restrict network access to the MCP server so that only trusted hosts or internal networks can reach it.
  • Apply any Red Hat security updates that address this path traversal issue as soon as they become available.
  • If the MCP component is not required for your operations, remove or disable it to eliminate the attack surface.

Generated by OpenCVE AI on August 3, 2026 at 23:53 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 23 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Wed, 22 Jul 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 22 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the user's system. This can result in the exposure of sensitive host information and enable the attacker to execute malicious commands, potentially leading to a full system compromise.
Title Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal
First Time appeared Redhat
Redhat ansible Automation Platform
Weaknesses CWE-22
CPEs cpe:/a:redhat:ansible_automation_platform:2
Vendors & Products Redhat
Redhat ansible Automation Platform
References
Metrics cvssV3_1

{'score': 6.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L'}

Subscriptions

Redhat Ansible Automation Platform
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-07-22T13:05:03.058Z

Reserved: 2026-05-05T15:02:54.444Z

Link: CVE-2026-44192

cve-icon Vulnrichment

Updated: 2026-07-22T13:04:58.772Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-07-22T12:18:00.063

Modified: 2026-07-22T16:23:35.893

Link: CVE-2026-44192

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-07-22T11:59:20Z

Links: CVE-2026-44192 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T00:00:09Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')