CVE-2013-4259

CVE-2013-4259 describes a local privilege escalation vulnerability in Ansible versions prior to 1.2.3, specifically within the runner/connection_plugins/ssh.py component when using ControlPersist. A local attacker could exploit this by creating a symlink to a predictable socket file in /tmp/, redirecting an SSH session. With a CVSS score of 1.9, this vulnerability has low severity, requiring local access and moderate attack complexity, with potential for partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.