CVE-2026-68563

The record

A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data` option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read sensitive archived PostgreSQL data, leading to information disclosure.

Affected packages

Related vulnerabilities

• CVE-2026-111499 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission… CWE-732
• CVE-2026-118574 Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File… CWE-732
• CVE-2026-107060 Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to… CWE-732
• CVE-2026-107055 Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387… CWE-732
• CVE-2026-107047 Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers… CWE-732
• CVE-2026-107044 Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows… CWE-732
• CVE-2026-107042 Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows… CWE-732
• CVE-2026-107039 Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard… CWE-732