Go/github.com/runatlantis/atlantis CVE-2026-64679: high 8.1, EPSS 0.80%
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation
Action: Upgrade github.com/runatlantis/atlantis to 0.45.0 or later.
go get github.com/runatlantis/atlantis@v0.45.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.19.8 | 0.45.0 | - |
Fixed versions
| 0.45.0 |
Sources
- osv: GHSA-26w5-6g95-gj28
- https://github.com/runatlantis/atlantis/security/advisories/GHSA-26w5-6g95-gj28
- https://github.com/runatlantis/atlantis/pull/6254
- https://github.com/runatlantis/atlantis/commit/ea4e4ceebf8b387d015fff7ed8a7fcca33279afe
- https://github.com/runatlantis/atlantis
- https://github.com/runatlantis/atlantis/releases/tag/v0.45.0
CVE-2026-64679 · published · modified · JSON