CVE-2026-45099 | Gruntwork-io Terragrunt up to 1.0.3 Cleanup internal/util/file.go fileManifest.Clean path traversal

A vulnerability was found in Gruntwork-io Terragrunt up to 1.0.3. It has been classified as critical. The impacted element is the function fileManifest.Clean of the file internal/util/file.go of the component Cleanup. Performing a manipulation results in path traversal.

This vulnerability was named CVE-2026-45099. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More