CVE-2014-4657: Red Hat Ansible

Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days.

The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.

Affected products

• Red Hat Ansible: before 1.5.4 (fixed in 1.5.4)

Published 2020-02-20. Last modified 2026-06-17.