VULNERABILITY INTELLIGENCE

CVE-2021-3040

CVSS score7.2 HIGH

EPSS probability1.29%

CISA KEVNot currently listed

Published2021-06-10

Last modified2026-06-17

Description

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.