Ansible sysadmins, make with the patch-fingers because the project's just gone public with a high-severity bug.

CVE-2016-9587 is a peach: “a compromised remote system being managed via Ansible can lead to commands being run on the Ansible controller (as the user running the ansible or ansible-playbook command)”, Ansible lead at Red Hat James Cammarata writes.