Terragrunt catalog predictable temp symlink clobber

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-64672 · Microsoft / collected KEV context

EUVD-2026-116370

GHSA-wv6g-x823-wx9m

GO-2026-6768

cve-program · CVE-2026-64672

• https://github.com/gruntwork-io/terragrunt/security/advisories/GHSA-wv6g-x823-wx9m
• https://github.com/gruntwork-io/terragrunt/pull/6438
• https://github.com/gruntwork-io/terragrunt/commit/668891c5a2ad2996f134bb8b00098754674ea94a
• https://github.com/gruntwork-io/terragrunt/releases/tag/v1.1.1

euvd · EUVD-2026-116370

• https://github.com/gruntwork-io/terragrunt/security/advisories/GHSA-wv6g-x823-wx9m
• https://github.com/gruntwork-io/terragrunt/pull/6438
• https://github.com/gruntwork-io/terragrunt/commit/668891c5a2ad2996f134bb8b00098754674ea94a
• https://github.com/gruntwork-io/terragrunt/releases/tag/v1.1.1

nvd · CVE-2026-64672

• https://github.com/gruntwork-io/terragrunt/commit/668891c5a2ad2996f134bb8b00098754674ea94a
• https://github.com/gruntwork-io/terragrunt/pull/6438
• https://github.com/gruntwork-io/terragrunt/releases/tag/v1.1.1
• https://github.com/gruntwork-io/terragrunt/security/advisories/GHSA-wv6g-x823-wx9m

osv · GHSA-wv6g-x823-wx9m

• https://github.com/gruntwork-io/terragrunt/security/advisories/GHSA-wv6g-x823-wx9m
• https://github.com/gruntwork-io/terragrunt/pull/6438
• https://github.com/gruntwork-io/terragrunt/commit/668891c5a2ad2996f134bb8b00098754674ea94a
• https://github.com/gruntwork-io/terragrunt

osv · GO-2026-6768

• https://github.com/gruntwork-io/terragrunt/security/advisories/GHSA-wv6g-x823-wx9m
• https://github.com/gruntwork-io/terragrunt/commit/668891c5a2ad2996f134bb8b00098754674ea94a
• https://github.com/gruntwork-io/terragrunt/pull/6438

• Terragrunt catalog predictable temp symlink clobber · Newly collected advisory · 3 Nov 2026