Plan active

Terraform 1.16.6 patches low-severity HTTP/2 CVE, workspace tag fix

2026-10-19 18:19 UTC · Releases: terraform · read the source ↗ #terraform #security #patch-release

Platform/SRE — Plan: CVE-2026-78669 affects Terraform’s HTTP/2 stack but is not KEV-listed (EPSS 0.01) and requires a compromised provider/module registry to exploit; schedule an upgrade to 1.16.6 in the next routine Terraform maintenance window.
CI/CD — Skip
Leader — Skip
Signals: deprecation mentioned (no explicit date found) · CVE-2026-78669 — CISA KEV: not listed, EPSS 0.01

This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.