Ansible sends commands to servers, but asks them for certain data first (facts). If one of your servers is compromised, this is a vulnerability in the ansible

Ansible sends commands to servers, but asks them for certain data first (facts). If one of your servers is compromised, this is a vulnerability in the ansible client that lets that bad server take over your local computer and your other servers when you connect to it by sending you bad facts. So it's pretty serious.