What’s Vulnerable › Products

runatlantis atlantis vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your runatlantis atlantis version is affected

Latest runatlantis atlantis vulnerabilities

• CVE-2026-116676 — Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan (CVSS 8.8)
• CVE-2026-82282 — Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers (CVSS 8.0)
• CVE-2026-64679 — Atlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creation (CVSS 8.1)
• CVE-2025-58445 — Atlantis Exposes Service Version Publicly on /status API Endpoint (CVSS 7.5)
• CVE-2024-52009 — Git credentials are exposed in atlantis logs (CVSS 9.8)
• CVE-2022-24912 — Timing Attack (CVSS 7.5)