Terraform Enterprise state versions can be created by users without sufficient write access

Summary Terraform state versions can be created by a user with specific but insufficient permissions in a Terraform Enterprise workspace. This may allow for the alteration of infrastructure if a subsequent plan operation is approved by a user with approval permission or is auto-applied. This...

PT-2025-47784

Name of the Vulnerable Software and Affected Versions Terraform Enterprise versions prior to 1.0.3 and prior to 1.1.1 Description A user with limited permissions within a Terraform Enterprise workspace can create Terraform state versions. This could lead to infrastructure changes if a subsequent...