CVE-2013-4260: lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error,...

Security readout for executives and security teams

CVE-2013-4260 is a legacy Ansible issue where a failed playbook run could create a predictable retry file in /var/tmp/ansible. A local user could abuse that predictable file handling to overwrite files through a symlink. The risk is mainly on shared systems running affected Ansible versions. Exposure is likely limited to systems still running Ansible 1.2.x before 1.2.3, especially shared administration hosts where local users can interact with temporary directories. Modern Ansible deployments are unlikely to be affected, but legacy automation hosts should be checked. Treat this as a legacy hygiene issue unless affected Ansible versions remain in use. Prioritize remediation on shared administration servers, because local file overwrite on automation control nodes can undermine operational integrity. Mitigation focus: Upgrade affected Ansible 1.2.x installations to 1.2.3 or later.; Check current vendor guidance for supported fixed versions.; Remove or retire obsolete Ansible installations from shared hosts..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.