The vulnerability resides in ansible‑collection‑redhat‑leapp. When a remediation task runs with elevated privileges and the leapp_old_postgresql_data option is selected, the module creates a PostgreSQL data backup archive. The archive and the directory it resides in are left with permissions that allow any local non‑root user to read them. This exposes sensitive PostgreSQL data and results in a confidentiality breach, as attackers can recover the backup in full. The weakness is identified as CWE‑732: Incorrect Permission Assignment for Critical Resource.

Affected systems are Red Hat Enterprise Linux 9 and Red Hat Enterprise Linux 10 managed through the ansible‑collection‑redhat‑leapp role. The flaw is triggered only when the leapp_old_postgresql_data option is used during a remediation task that executes with elevated privileges.

The CVSS score of 5.5 indicates moderate severity. The EPSS score is < 1%, indicating very low exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is local; a non‑root user on a managed node can read the archive after the task completes unless corrective permissions are applied. Inference: exploitation requires local access to the node or the ability to run the offending Ansible task.