The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.
"https://github.com/pypa/advisory-database/blob/main/vulns/ansible/PYSEC-2017-2.yaml"