Low severityOSV Advisory· Published May 6, 2025· Updated Apr 15, 2026
CVE-2025-46735
CVE-2025-46735
Description
Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version 1.0.5. The windns_record resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/nrkno/terraform-provider-windnsGo | <= 1.0.4 | — |
Affected products
3- Range: v0.0.1, v0.0.2, v0.0.3, …
- ghsa-coords2 versionspkg:golang/github.com/nrkno/terraform-provider-windnspkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
<= 1.0.4+ 1 more
- (no CPE)range: <= 1.0.4
- (no CPE)range: < 0.0.20250515T200012-1.1
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.