Terraform Provider vulnerabilities

1 known vulnerability in Terraform Provider from Bpg. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  terraform-provider-proxmox: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-25499Feb 4, 2026Bpg

  Terraform / OpenTofu Provider adds support for Proxmox Virtual Environment. Prior to version 0.93.1, in the SSH configuration documentation, the sudoer line suggested is insecure and can result in escaping the folder using ../, allowing any files on the system