CVE-2021-3701

CVE-2021-3701 is a medium-severity flaw in Red Hat ansible-runner, specifically affecting versions 2.0.0 and later, where temporary files are written to world-readable/writable locations. This vulnerability allows a local attacker to pre-create directories, potentially leading to the exposure of private information or forcing the legitimate user to write files to unintended locations, impacting confidentiality and integrity. With a CVSS score of 6.6, exploitation requires local access and user interaction, but has high impacts on confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.