Skip to content
Rrunatlantis
Products
| Product | CVEs | Exploited | Latest |
| atlantis | 5 | – | Oct 27, 2026 |
Exploited and recent CVEs
-
CVE-2026-116676
High 8.8
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
0.5%
-
CVE-2026-82282
High 8.0
Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers
0.4%
-
CVE-2026-64679
High 8.1
Atlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creation
0.8%
-
CVE-2025-58445
Medium 6.9
Atlantis Exposes Service Version Publicly on /status API Endpoint
0.5%
-
CVE-2024-52009
High 8.5
Git credentials are exposed in atlantis logs
0.7%