CVE-2021-40862

CVE-2021-40862 is a high-severity vulnerability affecting HashiCorp Terraform Enterprise up to version 202108-1. It involves an API endpoint that inadvertently exposed a sensitive URL to authenticated users, potentially leading to privilege escalation or unauthorized configuration changes. With a CVSS score of 8.8, this vulnerability is easily exploitable over a network with low privileges and no user interaction, resulting in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.