Vulnerability advisory
GO-2026-6273
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis
Also known as CVE-2026-64679GHSA-26w5-6g95-gj28
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
0.19.8 to before 0.45.0 | 0.45.0 |
Description
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis