Terragrunt catalog predictable temp symlink clobber

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, the terragrunt catalog command derives a predictable per-repository catalog clone root under the shared system temporary directory and follows a symlink already placed at that path. A local attacker who can write to the temporary directory and predict the cataloged repository can redirect cleanup and cloning outside the intended root, causing an existing repository-named directory to be deleted and replaced in the victim's security context. The attack requires the victim to run terragrunt catalog on a shared host while the symlink is present, and it is not remotely exploitable. This issue is fixed in version 1.1.1.

Etkilenen sürümler1 yazılım

Kaynaklar6 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…agrunt/security/advisories/GHSA-wv6g-x823-wx9m Diğer
• github.com/gruntwork-io/terragrunt/pull/6438 Diğer
• github.com/…ommit/668891c5a2ad2996f134bb8b00098754674ea94a Diğer
• github.com/gruntwork-io/terragrunt/releases/tag/v1.1.1 Diğer

Kayıt geçmişi

1. 3 Kas 2026 23:44Yayımlandı

İlgili açıklar

• 5,8 CVE-2026-112110Privileged file deletion in SafeNet Authentication Client SACSrv
• 5,5 CVE-2026-121746nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can write
• 5,5 CVE-2026-121747nvm prints the contents of any readable file through a symlinked .nvmrc
• 4,7 CVE-2026-122235Jan 0.8.5 before 0.8.8 Workspace Guard Bypass via Dangling Symlink
• 6,7 CVE-2026-122137Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer
• 4,4 CVE-2026-122136Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary File