HN
login
My Ansible Plugin Had a Jail Escape: CVE-2026-55074blog.hofstede.it

For almost a year, my jailexec connection plugin let a compromised FreeBSD jail redirect a root-owned write onto the jail host. The input validation was fine. The problem was on which side of the j...

1 points•zdw•3 days ago•1 comment•
#jail#plugin#escape#cve#ansible#jail escape#ansible plugin#almost

1 comment

MiroslavPokorny3 days ago
Said it before but will say it again, if you are using REGEX for validation you can nearly always be sure this shortcut is broken.

Regexp are nearly always broken for validation because they dont capture the context of the operation, in this case the text is checked as text and ignores other aspects of a path such as links etc.

Read the full thread on Hacker News →

Related stories