CVE-2026-44192: A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traver

A path traversal vulnerability (a flaw that lets attackers access files outside their intended directory) was discovered in the Ansible Lightspeed Model Context Protocol (MCP) server, allowing attackers to manipulate an AI agent through indirect prompt injection (tricking an AI by hiding malicious instructions in its input). This flaw can enable attackers to write files to unauthorized locations on a user's system, potentially exposing sensitive information and allowing them to execute malicious commands that could fully compromise the system.