CVE-2021-3040: Palo Alto Networks Bridgecrew Checkov

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.

Affected products

• Palo Alto Networks Bridgecrew Checkov: from 2.0.0, before 2.0.139 (fixed in 2.0.139)

Published 2021-06-10. Last modified 2026-06-17.