Skip to content
Threat Feed
Subscribe

Tag

Vscode-Extension

1 brief RSS
high advisory

Ansible Lightspeed VS Code Extension Command Injection Vulnerability (CVE-2026-44190)

A command injection vulnerability (CVE-2026-44190, CWE-78) in the Ansible Lightspeed Visual Studio Code extension allows remote attackers to execute arbitrary commands on a user's system due to improper validation of the `ansible.python.activationScript` setting, leading to complete system control when a malicious project is opened.

Ansible Lightspeed Visual Studio Code extension +1 command-injection vscode-extension remote-code-execution vulnerability
1t 1c