[ Vendor · 1 CVEs ]

runatlantis

CVEs affecting runatlantis published in the last 30 days, plus any runatlantis CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-116676 27 Oct 2026 CVSS 8.8 Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during planAtlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis… Fix