CVE-2017-2809: Ansible-Vault Project Ansible-Vault

High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days.

An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.

Affected products

• Ansible-Vault Project Ansible-Vault: up to and including 1.0.4

Published 2017-09-14. Last modified 2026-06-17.