Hashicorp Terraform vulnerabilities

• hashicorp terraform enterprise Path traversal allows arbitrary file read in Terraform Enterprise container CVE-2026-14468 7.7 HighJuly 6, 2026
• hashicorp terraform provider, tooling +1 more Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method CVE-2025-13357 Fix available 7.4 HighNovember 21, 2025
• hashicorp terraform, terraform enterprise +1 more Terraform Enterprise state versions can be created by users with specific permissions without sufficient write access CVE-2025-13432 4.3 MediumNovember 21, 2025
• hashicorp terraform Terraform Allows Arbitrary File Write During Init Operation CVE-2023-4782 Fix available 6.3 MediumSeptember 8, 2023
• hashicorp terraform enterprise Terraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces To Target an Agent Pool CVE-2023-3114 5.0 MediumJune 22, 2023
• hashicorp terraform enterprise HashiCorp Terraform Enterprise before 202202-1 inserts Sensitive Information into a Log File. CVE-2022-25374 7.5 HighFebruary 25, 2022
• hashicorp terraform enterprise HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously... CVE-2021-40862 8.8 HighSeptember 15, 2021
• hashicorp terraform HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization... CVE-2021-36230 Fix available 8.8 HighJuly 20, 2021
• hashicorp terraform provider HashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE... CVE-2021-30476 9.8 CriticalApril 22, 2021
• hashicorp terraform enterprise HashiCorp Terraform Enterprise up to v202102-2 failed to enforce an organization-level setting... CVE-2021-3153 6.5 MediumMarch 26, 2021
• hashicorp terraform enterprise HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user... CVE-2020-15511 5.3 MediumJuly 30, 2020
• hashicorp terraform Use of a Broken or Risky Cryptographic Algorithm in Terraform CVE-2019-19316 Fix available 7.5 HighDecember 2, 2019
• hashicorp terraform HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG CVE-2018-9057 Fix available 9.8 CriticalMarch 27, 2018