{"id":"INC-hashicorp-01M7C1A98RQS3K3096WX80FFT1","kind":"incident","aliases":[],"related":[],"title":"HashiCorp: HYOK, Private VCS, and Private Run Tasks returning 403 errors","description":"We are aware of elevated 403 errors being returned when requests are forwarded through the tfc-agent. This may impact HYOK, Private VCS, and Private Run Tasks.\n\n**Action underway**: Our engineers are investigating the cause now.\n\n**Next update time**: 03:55 UTC","summary":null,"severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"HashiCorp","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["hashicorp","incident","ops","terraform","vault","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-14T03:23:46+00:00","first_seen_at":"2026-11-14T03:25:11+00:00","triaged_at":"2026-11-14T03:26:20+00:00","updated_at":"2026-11-14T03:39:14+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'01m7c1a98rqs3k3096wx80fft1':15A '03':63C '403':10A,28C '55':64C 'action':51C 'agent':40C 'awar':25C 'caus':58C 'elev':27C 'engin':54C 'error':11A,29C 'forward':35C 'hashicorp':1A,14A,16A,17B 'hyok':2A,44C 'impact':43C 'inc':13A 'inc-hashicorp-01m7c1a98rqs3k3096wx80fft1':12A 'incid':18B 'investig':56C 'may':42C 'next':60C 'op':19B 'privat':3A,6A,45C,48C 'request':33C 'return':9A,31C 'run':7A,49C 'task':8A,50C 'terraform':20B 'tfc':39C 'tfc-agent':38C 'time':62C 'underway':52C 'updat':61C 'utc':65C 'vault':21B 'vcs':4A,46C 'vendor':22B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["hashicorp"],"ptokens":["hashicorp"],"labels":["hashicorp","high","incident","ops","terraform","vault","vendor"],"campaign_type":null,"search_a":"'01m7c1a98rqs3k3096wx80fft1':15A '403':10A 'error':11A 'hashicorp':1A,14A,16A 'hyok':2A 'inc':13A 'inc-hashicorp-01m7c1a98rqs3k3096wx80fft1':12A 'privat':3A,6A 'return':9A 'run':7A 'task':8A 'vcs':4A","search_b":"'hashicorp':17B 'incid':18B 'op':19B 'terraform':20B 'vault':21B 'vendor':22B","search_c":"'03':63C '403':28C '55':64C 'action':51C 'agent':40C 'awar':25C 'caus':58C 'elev':27C 'engin':54C 'error':29C 'forward':35C 'hyok':44C 'impact':43C 'investig':56C 'may':42C 'next':60C 'privat':45C,48C 'request':33C 'return':31C 'run':49C 'task':50C 'tfc':39C 'tfc-agent':38C 'time':62C 'underway':52C 'updat':61C 'utc':65C 'vcs':46C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-14T03:23:46+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"hashicorp:01M7C1A98RQS3K3096WX80FFT1","url":"https://status.hashicorp.com/incidents/01M7C1A98RQS3K3096WX80FFT1","severity":"high","published_at":"2026-11-14T03:23:46+00:00","modified_at":"2026-11-14T03:50:40+00:00","first_seen_at":"2026-11-14T03:25:11+00:00","fetched_at":"2026-11-14T03:54:39+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}