CVE-2026-116676

Name of the Vulnerable Software and Affected Versions Atlantis versions 0.4.0 through 0.47.0

Description Atlantis passes the workspace value from the atlantis.yaml file in a pull request into Terraform command arguments. These arguments are joined into a single string and executed via sh -c without proper quoting or escaping. An authenticated contributor who can trigger an Atlantis plan can include shell metacharacters in the workspace name to execute arbitrary commands as the Atlantis service account. This process bypasses the need for custom workflows, apply permissions, or malicious Terraform providers. The executed commands inherit the Atlantis process environment, allowing access to cloud-provider, Terraform, and version-control credentials, as well as available files, state, and network resources. External contributors can exploit this through fork pull requests if the --allow-fork-prs flag is enabled, while contributors with access to the same repository can do so without this flag.

Recommendations Update Atlantis to version 0.47.1.