CVE-2026-68563CWE-732

CVE-2026-68563

Medium · published July 31, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data` option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read sensitive archived PostgreSQL data, leading to information disclosure.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00144 · 3.4th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-07-31T02:16Z
References (2)
https://access.redhat.com/security/cve/CVE-2026-68563 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2465419 · [email protected]
EPSS history
Timeline
  • 30 JUL 21:13Z
    Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissions
    cvelistv5