Code execution via injected module arguments

Argument injection in Ansible before 1.6.7 allows remote attackers controlling a managed host to execute arbitrary code through crafted facts. Runner module-argument templating treated fact values as argument text, so trailing src, temp, or validate assignments added or replaced parameters, and validate values could carry shell commands. Exploitation requires control of a managed node and knowledge of a playbook that feeds its facts into module inputs; local_action or delegate_to can execute on the controller or another node.