CVE-2026-74797 - OpenTofu before 1.11.4 Denial of Service via malicious zip
Brief
CVE ID : CVE-2026-74797
Published : Aug. 16, 2026, 2:16 p. m.
- 50 minutes ago
Description : OpenTofu versions before 1.
- 4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted . zip archives for provider or module packages. Attackers can cause excessive CPU usage by controlling . zip archive content served during dependency installation, degrading system performance and preventing timely completion of the init process.
Severity: 3.1
- LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...