Product by Runatlantis
Atlantis
6 known vulnerabilities in Atlantis (Runatlantis), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-64679 | Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation | 8.1 | |
| High | CVE-2026-116676 | Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan | 8.8 | |
| High | CVE-2026-82282 | Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers | 8.0 | |
| Critical | CVE-2024-52009 | Git credentials are exposed in atlantis logs | 9.8 | |
| High | CVE-2022-24912 | Timing Attack | 7.5 | |
| High | CVE-2025-58445 | Atlantis Exposes Service Version Publicly on /status API Endpoint | 7.5 |