Product
RCE in Atlantis
Back in August we found this cool bypass of developer restrictions in Atlantis, leading to an unreviewed terraform apply & RCE! The vulnerable Gitea approval path dates back to the integration's introduction in v0.2…
About
Back in August we found this cool bypass of developer restrictions in Atlantis, leading to an unreviewed terraform apply & RCE! The vulnerable Gitea approval path dates back to the integration's introduction in v0.28.0 (May 2024), so the bypass was most likely present for roughly two and a half years before the patch shipped in October 2026. Enjoy!
Discovery history
- Show HN
Discuss this product