CVE-2026-64672 in Terragrunt

Prediction

by VulDB Data Team • 10/15/2026

A flaw has been found in <a href="/product/terragrunt">Terragrunt up to 1.1.0</a>. This issue affects some unknown processing of the component <em>Catalog Service</em>. Executing a manipulation can lead to symlink following. The attack needs to be launched locally. Upgrading to version 1.1.1 is capable of addressing this issue. It is advisable to upgrade the affected component.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Moderation: accepted
• Entry: VDB-420821
• CWE: CWE-61 (confirmed)
• CVSS: 3.9 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-64672
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-64672
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-64672/