Login Request a demo
RU
Vendor
runatlantis
1 product with CVEs on record
6
CVEs
0
On KEV
1
New 30D
Products
AT
atlantis
runatlantis
9.8
6 CVEs0 on KEV1 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116676
New
AT
atlantis
runatlantis
8.8–Oct 27Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
CVE-2026-82282
AT
atlantis
runatlantis
8.0
0%
Aug 28Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers
CVE-2026-64679
AT
atlantis
runatlantis
8.1
1%
Aug 21Atlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creation
CVE-2025-58445
AT
Atlantis
Runatlantis
7.5
0%
Sep 6Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks
CVE-2024-52009
AT
Atlantis
Runatlantis
9.8
1%
Nov 8Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks
CVE-2022-24912
AT
Atlantis
Runatlantis
7.5
1%
Jul 29The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in the webhook event validator code, which does not use a…