CVE-2021-3035: Palo Alto Networks Bridgecrew Checkov

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted.

Affected products

• Palo Alto Networks Bridgecrew Checkov: from 2.0.0, before 2.0.26 (fixed in 2.0.26)

Published 2021-04-20. Last modified 2026-06-17.