What is CVE-2026-14468?

CVE-2026-14468 is a high-severity vulnerability in Hashicorp Terraform Enterprise, classified under Path Traversal. CVSS score: 7.7/10. Published 2026-07-06.

How severe is CVE-2026-14468?

High severity. CVSS v3 base score is 7.7 out of 10.

Path Traversal in Hashicorp Terraform Enterprise

CVE-2026-14468

HashiCorp Terraform Enterprise contained an issue in its version control system (VCS) ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to in…

Vulnerability class: Path Traversal (Directory Traversal)

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.

Affected products

Hashicorp Terraform Enterprise — versions 1.0.0

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security@hashicorp.com

Frequently asked questions

What is CVE-2026-14468?: CVE-2026-14468 is a high-severity vulnerability in Hashicorp Terraform Enterprise, classified under Path Traversal. CVSS score: 7.7/10. Published 2026-07-06.
How severe is CVE-2026-14468?: High severity. CVSS v3 base score is 7.7 out of 10.