CVE-2026-64672 | Terragrunt up to 1.1.0 Catalog Service symlink

October 15, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Terragrunt up to 1.1.0. This issue affects some unknown processing of the component Catalog Service. Executing a manipulation can lead to symlink following.

This vulnerability is registered as CVE-2026-64672. The attack needs to be launched locally. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More