CVE-2026-115414
OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who…
- Risk score
- 68/100
- CVSS
- 7.8 v3.1
- Exploit chance (30 days)
- 0.9%
- Published
- 22 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- The Terraform hook in AWS SAM CLI before 1.166.2 has an OS command injection vulnerability, which could allow an attacker to execute arbitrary commands as the build user. An attacker could exploit this by crafting a Terraform resource address.
- Affected
- {'products': ['AWS SAM CLI'], 'packages': [], 'versions': ['before 1.166.2']}
- Fix
- Upgrade to version 1.166.2 or later
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 7.8 high
- On your watchlist: terraform
References
Original description
OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To remediate this issue, users should upgrade to version 1.166.2 or later.
Last activity 22 Oct 2026. Patch Forecast updates every hour.