CVE-2026-116676: Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
Atlantis passes the Terraform workspace value from a pull request’s atlantis.yaml into a shell command without quoting or escaping it.
A contributor whose pull request is eligible for an Atlantis plan can include shell metacharacters in the workspace name and execute arbitrary commands as the Atlantis service account. This does not require custom workflows, allow_custom_workflows, or permission to run terraform apply.
The executed command inherits the Atlantis process environment, which commonly contains cloud-provider, Terraform, and VCS credentials.
References
- github.com/advisories/GHSA-rjh2-4xgw-p2hj
- github.com/runatlantis/atlantis/commit/8dd22b4d0a9d7c129fdbf6a3398dd1c4cf8c3a59
- github.com/runatlantis/atlantis/commit/f04df0d53f0544d9eb6f5026dd8b74fbefd82ac8
- github.com/runatlantis/atlantis/pull/6792
- github.com/runatlantis/atlantis/releases/tag/v0.47.1
- github.com/runatlantis/atlantis/security/advisories/GHSA-rjh2-4xgw-p2hj
- nvd.nist.gov/vuln/detail/CVE-2026-116676
Code Behaviors & Features
Detect and mitigate CVE-2026-116676 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →