Show HN: RCE in Atlantis
By danieltk76 · 2026-10-26 · 3 points · 0 comments
https://medium.com/@Vulnetic-CEO/dismissed-approval-to-rce-unreviewed-terraform-apply-in-atlantis-e2a991694a41
Back in August we found this cool bypass of developer restrictions in Atlantis, leading to an unreviewed terraform apply & RCE! The vulnerable Gitea approval path dates back to the integration's introduction in v0.28.0 (May 2024), so the bypass was most likely present for roughl…
Open the full discussion on BetterNews