CVE-2026-74797 | OpenTofu up to 1.11.3 Init Command init denial of service

A vulnerability classified as problematic was found in OpenTofu up to 1.11.3. The affected element is the function init of the component Init Command. The manipulation results in denial of service.

This vulnerability was named CVE-2026-74797. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.