CVE-2022-25374: Hashicorp Terraform Enterprise

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

HashiCorp Terraform Enterprise v202112-1, v202112-2, v202201-1, and v202201-2 were configured to log inbound HTTP requests in a manner that may capture sensitive data. Fixed in v202202-1.

Affected products

• Hashicorp Terraform Enterprise: before 202202-1 (fixed in 202202-1)

Published 2022-02-25. Last modified 2026-06-17.