CVE record · 2 sources
CVE-2026-115414
CVSS 7.8OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan…
- Vendor
- HashiCorp
- Product
- Vault / Terraform / Consul / Nomad
- CVSS
- 7.8
- EPSS
- 0.009 (p59)
- Exposure class
- Developer platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan…
OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the…
-
CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook
Bulletin ID: 2026-145-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 11:30 AM PDT Description: AWS SAM CLI is an open-source framework for building serverless applications. We identified…