Vulnerability GO-2026-6871
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:54 PM UTC
OS command injection through PR-controlled Terraform workspace enables RCE during plan in github.com/runatlantis/atlantis
>=0.4.0 <0.47.1
>=0.4.0 <0.47.1
Summary
OS command injection through PR-controlled Terraform workspace enables RCE during plan in github.com/runatlantis/atlantis
Details
OS command injection through PR-controlled Terraform workspace enables RCE during plan in github.com/runatlantis/atlantis
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
9 days ago
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
>=0.4.0 <0.47.1 GHSA-rjh2-4xgw-p2hj
>=0.4.0 <0.47.1 GHSA-rjh2-4xgw-p2hj
Unknown
2 months ago
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis
>=0.19.8 <0.45.0 GO-2026-6273
>=0.19.8 <0.45.0 GO-2026-6273
High Risk
2 months ago
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation
>=0.19.8 <0.45.0 GHSA-26w5-6g95-gj28
>=0.19.8 <0.45.0 GHSA-26w5-6g95-gj28
Unknown
1 year ago
Atlantis Exposes Service Version Publicly on /status API Endpoint in github.com/runatlantis/atlantis
* GO-2025-3940
* GO-2025-3940
High Risk
1 year ago
Atlantis Exposes Service Version Publicly on /status API Endpoint
<=0.35.1 GHSA-xh7v-965r-23f7
<=0.35.1 GHSA-xh7v-965r-23f7
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:54 PM UTC
Fixed (v0.47.1)
2 months ago
August 20, 2026 at 06:20 PM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC