CVE-2026-44187
LowCVSS 3.3Summary
The Ansible Lightspeed extension for Visual Studio Code stores the Google Gemini API key in plain text in the user's configuration file and writes it to log files. A local attacker or malware with user privileges can read this key.
Risk Assessment
Disclosure of the API key could allow an attacker to consume the victim's API quota, leading to unauthorized usage and potential costs.
Recommendation
Update the Ansible Lightspeed extension to a version that securely stores the API key. Until then, avoid using the extension on shared or untrusted workstations.
Original NVD description (English source)
A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text within the user's configuration file and writes it to output log files. This information disclosure can lead to the attacker obtaining the API credential and potentially consuming the user's API quota.