Show HN: RCE in Atlantis
Back in August we found this cool bypass of developer restrictions in Atlantis, leading to an unreviewed terraform apply & RCE! The vulnerable Gitea approval path dates back to the integration's introduction in v0.28.0 (May 2024), so the bypass was most likely present for roughly two and a half years before the patch shipped in October 2026. Enjoy!
Comments URL: https://news.ycombinator.com/item?id=50245574
Points: 2
# Comments: 0
原文：https://www.a8q9.cn/en/article/show-hn-rce-in-atlantis-797fb9.html