The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.Referenceshttps://github.com/ansible/ansible/commit/8ed6350e65c82292a631f08845dfaacffe7f07f5https://bugzilla.redhat.com/show_bug.cgi?id=1335551