Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

Untriaged

Filter by:

With package: terraform-providers.bpg_proxmox

Found 1 matching suggestions

View:

Compact

Detailed

Permalink CVE-2026-25499

created 2 months, 2 weeks ago Activity log

Created suggestion 2 months, 2 weeks ago

terraform-provider-proxmox has insecure sudo recommendation in the documentation

Terraform / OpenTofu Provider adds support for Proxmox Virtual Environment. Prior to version 0.93.1, in the SSH configuration documentation, the sudoer line suggested is insecure and can result in escaping the folder using ../, allowing any files on the system to be edited. This issue has been patched in version 0.93.1.

References

https://github.com/bpg/terraform-provider-proxmox/security/advisories/GHSA-gwch-7m8v-7544 x_refsource_CONFIRMexploit
https://github.com/bpg/terraform-provider-proxmox/commit/bd604c41a31e2a55dd6acc01b0608be3ea49c023 x_refsource_MISC

Affected products

terraform-provider-proxmox

==< 0.93.1

Matching in nixpkgs

pkgs.terraform-providers.proxmox

None

pkgs.terraform-providers.bpg_proxmox

None

nixos-unstable -
- nixpkgs-unstable 0.93.0
nixos-25.11 0.87.0

pkgs.terraform-providers.telmate_proxmox

None

nixos-unstable -
- nixpkgs-unstable 3.0.2-rc04
nixos-25.11 3.0.2-rc04

1