CVE-2026-116676 - Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
CVE ID :CVE-2026-116676 Published : Oct. 27, 2026, 6:17 p.m. | 2 hours, 6 minutes ago Description :Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace...