opentofu vulnerabilities
3 published CVEs name opentofu among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-74797
OpenTofu before 1.11.4 Denial of Service via malicious zip
opentofu · opentofu
Low2.3 - CVE-2026-74796
OpenTofu before 1.11.7 Symlink Following Path Traversal
opentofu · opentofu
High7.0 - CVE-2024-58375
OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation
opentofu · opentofu
High8.7