{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Atlantis 0.49.0 fixes 12 security flaws, including a critical forged-webhook fork-protection bypass that leads to remote code execution · updates",
  "home_page_url": "https://pwn.watch/i/atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026",
  "feed_url": "https://pwn.watch/i/atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026/feed.json",
  "description": "On October 25 the Atlantis project (the Terraform pull request automation server) released v0.49.0 and published 12 GitHub security advisories fixed in it. The worst, GHSA-6mjf-4m52-m5cq (CVSS 9.8, critical), comes from Atlantis checking only the path of a pull request's clone URL and not its host, while trusting the head repository name from the webhook body: a forged webhook can point Atlantis at an attacker's git server, pass the --allow-fork-prs=false gate and --repo-allowlist, and have Atlantis fetch and plan a Terraform tree the attacker controls. Servers without a GitHub webhook secret accept that forged webhook from anyone without authentication. Other fixes cover a Gitea dismissed-approval bypass of apply_requirements (GHSA-fm5f-jg8p-x2vw, 8.8), an allowed_workflows allow-list bypass in multi-project atlantis.yaml files (GHSA-56q6-8vmp-v2qm, 8.2), a plan-hijack apply-approval bypass (GHSA-5vwh-xc92-8h64), a pull request symlink that makes Terraform run outside the checkout (GHSA-9q39-mgw7-5789), unauthenticated lock metadata on /api/locks (GHSA-xgrg-fpp6-q6fm), timing attacks on Basic Auth and API secrets plus path traversal on /api/plan and /api/apply, an arbitrary file read via --var-file, secrets leaking into PR comments when output hiding errors, and a CSRF in the GitHub App setup callback. The advisories do not mention exploitation. v0.49.0 is a breaking release: GitHub and GHES webhooks whose clone URL host differs from --gh-hostname are now rejected, and the Docker images no longer bundle Terraform or OpenTofu. Anyone upgrading from v0.47.0 or earlier also picks up the v0.47.1 fix for CVE-2026-116676, a PR-controlled workspace name that was passed unquoted into a shell command. Upgrade to 0.49.0 and set a GitHub webhook secret.",
  "language": "en",
  "_pwn": {
    "slug": "atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026",
    "severity": "critical",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026#2026-10-25-275abc7b",
      "url": "https://pwn.watch/i/atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026#2026-10-25-275abc7b",
      "title": "Atlantis 0.49.0 fixes 12 security flaws, including a critical forged-webhook fork-protection bypass that leads to remote code execution: Atlantis releases v0.49.0, a breaking release that fixes 12 security advisories, led by the critical forged-webhook fork-protection bypass GHSA-6mjf-4m52-m5cq.",
      "content_text": "Atlantis 0.49.0 fixes 12 security flaws, including a critical forged-webhook fork-protection bypass that leads to remote code execution: Atlantis releases v0.49.0, a breaking release that fixes 12 security advisories, led by the critical forged-webhook fork-protection bypass GHSA-6mjf-4m52-m5cq.\n\nSource: https://github.com/runatlantis/atlantis/releases/tag/v0.49.0",
      "date_published": "2026-10-25T00:00:00.000Z",
      "external_url": "https://github.com/runatlantis/atlantis/releases/tag/v0.49.0",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026#2026-08-25-81141bb2",
      "url": "https://pwn.watch/i/atlantis-0-49-0-security-fixes-fork-bypass-rce-oct-2026#2026-08-25-81141bb2",
      "title": "Atlantis 0.49.0 fixes 12 security flaws, including a critical forged-webhook fork-protection bypass that leads to remote code execution: Atlantis publishes GHSA-rjh2-4xgw-p2hj, a shell command injection through a PR-controlled Terraform workspace name, fixed in 0.47.1 and now tracked as CVE-2026-116676.",
      "content_text": "Atlantis 0.49.0 fixes 12 security flaws, including a critical forged-webhook fork-protection bypass that leads to remote code execution: Atlantis publishes GHSA-rjh2-4xgw-p2hj, a shell command injection through a PR-controlled Terraform workspace name, fixed in 0.47.1 and now tracked as CVE-2026-116676.\n\nSource: https://github.com/runatlantis/atlantis/security/advisories/GHSA-rjh2-4xgw-p2hj",
      "date_published": "2026-08-25T00:00:00.000Z",
      "external_url": "https://github.com/runatlantis/atlantis/security/advisories/GHSA-rjh2-4xgw-p2hj",
      "tags": [
        "critical"
      ]
    }
  ]
}