Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.12: opentofu1.12-1.12.7-0.2.hum1 aarch64, s390x, x8664 opentofu1.12-1.12.7-0.2.hum1.src src...

CLEANSTART-2026-SO98691 Security fix for ghsa-r92c-9c7f-3pj8 applied in: opentofu 1.11.4-r0

Security vulnerability affects the opentofu package. This issue is resolved in later releases. See references for vulnerability details...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, kyverno-notation-aws, opentofu, xeol, flux-helm-controller, cert-manager-cmctl, helm-set-status, kargo, k8sgpt, manifest-tool, kube-arangodb, cluster-api-helm-controller, maru, k9s, rancher-helm, helm-push, gitness, tigera-operator...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, kyverno-notation-aws, opentofu, xeol, flux-helm-controller, cert-manager-cmctl, helm-set-status, kargo, k8sgpt, manifest-tool, kube-arangodb, cluster-api-helm-controller, maru, k9s, rancher-helm, helm-push, gitness, tigera-operator...

GO-2026-6508 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, pulumi-kubernetes-operator, falcosidekick, grafana-alloy, opentofu, aws-otel-collector, fluent-bit-plugin-loki, distribution, harbor-registry, traefik, grafana-pyroscope, caddy, grafana-mimir, grafana, tempo, datadog-agent, loki, zot,...

The vulnerability of the OpenTofu infrastructure management tool is related to the presence of a vulnerability in the borrowed component, which allows a attacker to trigger a service failure.

The vulnerability of the OpenTofu infrastructure management tool is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to cause service failures...

CVE-2026-81871 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, grafana-mimir, kots, caddy-fips, loki, distribution-fips, falcosidekick, harbor-registry, amazon-cloudwatch-agent, pulumi-kubernetes-operator, opentofu, grafana-alloy, grafana-pyroscope-fips, zot, commercial-grafana, aws-otel-collector-fips,...

CLEANSTART-2026-CV85257 Security fix for ghsa-jc7w-c686-c4v9 applied in: gptscript 0.6.0-r0, gptscript 0.7.1-r0, gptscript 0.8.5-r0, opentofu-fips 1.10.7-r0, opentofu-fips 1.10.7-r1

ghsa-jc7w-c686-c4v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BJ71317 Security fix for ghsa-wjrx-6529-hcj3 applied in: atlantis 0.37.1-r1, atlantis-fips 0.37.1-r0, opentofu-fips 1.10.7-r0, opentofu-fips 1.10.7-r1

ghsa-wjrx-6529-hcj3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LK31103 Security fix for CVE-2025-52894 applied in: opentofu-fips 1.10.7-r1, opentofu-fips 1.10.7-r2

CVE-2025-52894 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MI15449 Security fix for ghsa-r92c-9c7f-3pj8 applied in: opentofu-fips 1.11.4-r0

Security vulnerability affects the opentofu-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TK35937 Security fix for CVE-2024-10006 applied in: opentofu-fips 1.10.9-r0, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, rundeck 6.0.0-r0

CVE-2024-10006 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AW78522 Security fix for CVE-2024-10005 applied in: opentofu-fips 1.10.9-r0, opentofu-fips 1.7.10-r1, opentofu-fips 1.8.11-r1, rundeck 6.0.0-r0

CVE-2024-10005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101120

Security vulnerability affects the opentofu-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-14978 vulnerabilities

Vulnerabilities for packages: terraform, terraform-mcp-server, opentofu...

GHSA-92X3-5H48-MFHX vulnerabilities

Vulnerabilities for packages: terraform, terraform-mcp-server, opentofu...

GHSA-92X3-5H48-MFHX vulnerabilities

Vulnerabilities for packages: vault-fips, opentofu-fips, terraform-mcp-server, vault, terraform-fips, helmfile, terraform, terraform-ls, opentofu...

CVE-2026-14978 vulnerabilities

Vulnerabilities for packages: vault-fips, opentofu-fips, terraform-mcp-server, vault, terraform-fips, helmfile, terraform, terraform-ls, opentofu...

ROS-20260902-73-0014

The vulnerability in opentofu relates to the use of a name with an incorrect reference. Exploiting this vulnerability can allow a hacker to cause a service failure...

GO-2026-6262 OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers in github.com/opentofu/opentofu

OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers in github.com/opentofu/opentofu...