CVE-2026-44187: A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with

A vulnerability in the Ansible Lightspeed extension for Visual Studio Code allows attackers with access to a user's computer or malware running on it to steal the Google Gemini API key (a credential that grants access to AI services). The extension stores this key in plain text (unencrypted, readable format) in the user's configuration file and writes it to log files, potentially letting attackers use the user's API quota.