Opentofu vulnerabilities
We track 1 vulnerability in Opentofu products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Opentofu vulnerabilities
- 7.5 High severity
opentofu: Exposure of Sensitive System Information to an Unauthorized Control Sphere
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through t