CVE-2026-116676— Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

Quick assessment

Affected

runatlantis atlantis

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Atlantis 是一款自托管的 Go 语言应用程序，通过 Webhook 监听 Terraform 的 Pull Request（拉取请求）事件。从 0.4.0 版本到 0.47.1 版本，Atlantis 会将由拉取请求控制的、在中指定的工作区（workspace）值，作为参数传递给 Terraform 命令；这些参数通过拼接成字符串后，经由执行。任何拥有拉取请求权限且其请求符合 Atlantis 执行计划（plan）条件的认证贡献者，均可在工作区名称中注入 Shell 元字符，从而以 Atlantis

CVSS 8.8 · High Updated Oct 28, 2026

Possible ATT&CK Techniques 3 AI

T1055.012 · Process Hollowing T1059.007 · JavaScript T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

Source: CVE Program / CVE List V5

Vulnerability Description

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace value from atlantis.yaml into Terraform command arguments that are joined with strings.Join(args, " ") and executed through sh -c. An authenticated contributor whose pull request is eligible for an Atlantis plan can include shell metacharacters in the workspace name, causing arbitrary commands to execute as the Atlantis service account without custom workflows, apply permission, or a malicious Terraform provider. External contributors can reach the flaw through fork pull requests only when --allow-fork-prs is enabled, while eligible same-repository branches do not require that option. The commands inherit the Atlantis process environment and can access cloud-provider, Terraform, and version-control credentials as well as files, state, and network resources available to the service. This issue is fixed in version 0.47.1.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
runatlantis	atlantis	>= 0.4.0, < 0.47.1	-

II. Public POCs for CVE-2026-116676

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-116676

请登录查看更多情报信息。

Other References for CVE-2026-116676 (5)

https://github.com/runatlantis/atlantis/pull/6792 x_refsource_MISC
https://github.com/runatlantis/atlantis/releases/tag/v0.47.1 x_refsource_MISC
https://github.com/runatlantis/atlantis/security/advisories/GHSA-rjh2-4xgw-p2hj x_refsource_CONFIRM
https://github.com/runatlantis/atlantis/commit/8dd22b4d0a9d7c129fdbf6a3398dd1c4cf8c3a59 x_refsource_MISC
https://github.com/runatlantis/atlantis/commit/f04df0d53f0544d9eb6f5026dd8b74fbefd82ac8 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-116676

IV. Related Vulnerabilities

Same product: atlantis

Same vendor: runatlantis

Same weakness: CWE-78