redhat/python-pulp-ansible vulnerabilities

Latest redhat/python-pulp-ansible CVEs

Newest publication first

1. CVE-2026-103869 Pulp-ansible: bearer tokens are reused across remotes in a worker

   Published 2026-10-07

   Medium·CVSS 6.5

   A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for every token download in that worker. A user who can sync an Ansible remote that uses token refresh, and can point that remote at a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.