{"id":"INC-hashicorp-01M5J9S4598B4CW5PZN0P739CD","kind":"incident","aliases":[],"related":[],"title":"HashiCorp: GitHub and Other VCS workloads experiencing intermittent issues","description":"Today we released tfc-agent 1.33.3 to address the root cause of the failures we saw yesterday. A recent security patch to libcurl exposed a bug in the version of git we ship in the tfc-agent image. This causes some VCS setups to fail when the VCS provider issues an HTTP redirect. We've patched the bug in git. If you are using remote runs, you don't have to do anything, you're already on 1.33.3. If you downgraded to 1.33.1 to work around git-based VCS problems, you can safely upgrade to 1.33.3 now. Please contact support if you experience any further issues.","summary":null,"severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"HashiCorp","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["hashicorp","incident","ops","security","terraform","vault","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-10-22T17:15:44+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","triaged_at":"2026-10-23T20:06:32+00:00","updated_at":"2026-10-23T21:08:44+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'01m5j9s4598b4cw5pzn0p739cd':13A '1.33.1':106C '1.33.3':28C,101C,120C 'address':30C 'agent':27C,60C 'alreadi':99C 'anyth':96C 'around':109C 'base':112C 'bug':48C,81C 'caus':33C,63C 'contact':123C 'downgrad':104C 'experi':127C 'experienc':7A 'expos':46C 'fail':68C 'failur':36C 'git':53C,83C,111C 'git-bas':110C 'github':2A 'hashicorp':1A,12A,14A,15B 'http':75C 'imag':61C 'inc':11A 'inc-hashicorp-01m5j9s4598b4cw5pzn0p739cd':10A 'incid':16B 'intermitt':8A 'issu':9A,73C,130C 'libcurl':45C 'op':17B 'patch':43C,79C 'pleas':122C 'problem':114C 'provid':72C 're':98C 'recent':41C 'redirect':76C 'releas':24C 'remot':88C 'root':32C 'run':89C 'safe':117C 'saw':38C 'secur':18B,42C 'setup':66C 'ship':55C 'support':124C 'terraform':19B 'tfc':26C,59C 'tfc-agent':25C,58C 'today':22C 'upgrad':118C 'use':87C 'vault':20B 'vcs':5A,65C,71C,113C 've':78C 'vendor':21B 'version':51C 'work':108C 'workload':6A 'yesterday':39C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T17:15:44+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"hashicorp:01M5J9S4598B4CW5PZN0P739CD","url":"https://status.hashicorp.com/incidents/01M5J9S4598B4CW5PZN0P739CD","severity":"high","published_at":"2026-10-22T17:15:44+00:00","modified_at":"2026-10-23T21:07:39+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","fetched_at":"2026-10-26T05:02:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}