Product by Open Source
Opentofu
4 known vulnerabilities in Opentofu (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-4660 | Go-getter may allow to arbitrary filesystem reads through git operations | 7.5 | |
| High | CVE-2024-58375 | OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation | 7.5 | |
| High | CVE-2026-74796 | OpenTofu before 1.11.7 Symlink Following Path Traversal | 6.1 | |
| Low | CVE-2026-74797 | OpenTofu before 1.11.4 Denial of Service via malicious zip | 3.1 |