CVE-2025-2180 — Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

CVE-2025-2180

Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution PUBLISHED

Description (CNA)

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Checkov by Prisma Cloud	affected 3.2.0 before 3.2.415

CWE

CWE-502

References

https://security.paloaltonetworks.com/CVE-2025-2180

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.