VulnSocial

CVE-2026-115414

LOWCVSS 8.4 · HIGH

Signal is active with 10 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To remediate this issue, users should upgrade to version 1.166.2 or later.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 10 mentions across 1 observed day

What's happening

  • 10 total mentions across 1 day

Deep dive

Activity timeline10 mentions / 1d
035810Mentions · 2026-10-26: 1010-26
Referenced assets4 URLs
Full discourse10 posts
  • Miyahan@miyahancom

    CVE-2026-115414 何だろう、私の中の野獣がざわついた OS command injection in the Terraform hook in AWS SAM CLI https://www.cve.org/CVERecord?id=CVE-2026-115414

    0914999.5K
    12.1K followersView on X
  • ほげ@hogehoge61

    CVE-2026-115414 ニアミスやめろ https://aws.amazon.com/jp/security/security-bulletins/2026-145-aws/

    00051723
    1.6K followersView on X
  • 🔰にっくす@___nix___

    CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook 発動条件はレアだけど、AI使って全てを任せていたら有り得るケースなのかもね

    00140720
    2.5K followersView on X
  • ❄︎ arap!! ❄︎@eiraces

    CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook https://aws.amazon.com/security/security-bulletins/2026-145-aws/

    00040636
    778 followersView on X
  • Lyiase@lyiase

    おしいんだよなー。CVE-2026-115414。

    0000046
    4.0K followersView on X
  • SHELLCODE@sh3ll_c0d3

    AWS SAM CLI Terraform Hook Command Injection (CVE-2026-115414) • Makefile recipe shell metacharacter injection • RCE on developer workstations & CI/CD build nodes Read full: https://sh3llc0d3.com/blog/aws-security-bulletin-2026-145-aws-sam-cli-terraform-hook-os-command-injection-via-makefile-recipe-shell-interpolation-cve-2026-115414/ #Hacktober #sh3llc0d3 #SupplyChain #Terraform #AWS

    0000025
    168 followersView on X
  • せぐ@5egudia

    115414は報告されてるんだからCVE-2026-114514早く報告して https://www.cve.org/CVERecord?id=CVE-2026-115414

    0000076
    260 followersView on X
  • . 相 馬 ³⁰@IJacKIknlfel97I

    CVE-2026-115414（いい子良い世）

    0000020
    20 followersView on X
  • Autumn Good@autumn_good_35

    『allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build.』 CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook https://aws.amazon.com/jp/security/security-bulletins/2026-145-aws/

    00000402
    7.4K followersView on X
  • あたり@ Practice makes perfect.@Hayate_72

    CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook https://aws.amazon.com/jp/security/security-bulletins/2026-145-aws/

    00000138
    458 followersView on X

Explore more

Back to dashboard