CVE-2021-3702

CVE-2021-3702 is a race condition vulnerability in ansible-runner that allows an attacker to gain unauthorized access to ansible-runner's private_data_dir. By exploiting the rapid creation and deletion of a temporary directory, an attacker can substitute their own directory, leading to high impact on data confidentiality and integrity. This medium-severity flaw (CVSS 6.3) requires local access and high attack complexity, but does not involve user interaction. Currently, there is no known active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.