opentofu

Products

ProductCVEsExploitedLatest
opentofu3–Aug 16, 2026

Exploited and recent CVEs

  • CVE-2026-74797 Low 3.1 OpenTofu before 1.11.4 Denial of Service via malicious zip 0.3%
  • CVE-2026-74796 Medium 6.1 OpenTofu before 1.11.7 Symlink Following Path Traversal 0.3%
  • CVE-2024-58375 High 7.5 OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation 0.4%