# HashiCorp in July 2026: incidents, uptime and changes

> HashiCorp in July 2026: 4 incidents on its status page (2 major or critical), 95.87% free of major or critical incidents (vendor-reported), 12 CVEs. From Rewindex’s archive of HashiCorp’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/hashicorp/2026/07
Last updated: 2026-10-25T20:10:00Z

- Incidents posted: 4 (major/critical: 2) · Maintenance: 2
- By vendor impact label: major 2, minor 1, none 1
- Uptime (vendor-reported): 95.87% free of major/critical incidents, 95.00% free of any incident; outage time 10 h 28 min, incident time 12 h 40 min (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 12
- Previous month: [May 2026](https://rewindex.com/company/hashicorp/2026/05.md) · Next: [August 2026](https://rewindex.com/company/hashicorp/2026/08.md) · [All months](https://rewindex.com/company/hashicorp/reports.md) · [HashiCorp](https://rewindex.com/company/hashicorp.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [HCP Terraform Workspace Runs Failing with IAM Errors After AWS Provider Upgrade](https://rewindex.com/company/hashicorp/incidents/01KYPY1KTBE8KWC4E75RXN0XX8.md) | major | 2026-07-29 12:36 UTC | 2026-07-29 20:44 UTC | 8.1 h | resolved |
| [app.terraform.io is not loading](https://rewindex.com/company/hashicorp/incidents/01KYTMEGH8061RBGTX8RJ394XJ.md) | major | 2026-07-30 23:06 UTC | 2026-07-31 01:26 UTC | 2.4 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Terraform Runs Failing to Fetch GitHub Sources Over SSH](https://rewindex.com/company/hashicorp/incidents/01KY23QHWJSW7BDJ353WBPTCPG.md) | minor | 2026-07-21 10:32 UTC | 2026-07-21 12:43 UTC | 2.2 h | resolved |
| [Increased Load Times for HCP Portal](https://rewindex.com/company/hashicorp/incidents/01KYNK8FNDVDAMZG76CJ8PDWKZ.md) | none | 2026-07-29 00:09 UTC | 2026-07-29 15:50 UTC | 16 h | resolved |
| [HCP Terraform Workspace Runs Failing with IAM Errors After AWS Provider Upgrade](https://rewindex.com/company/hashicorp/incidents/01KYPY1KTBE8KWC4E75RXN0XX8.md) | major | 2026-07-29 12:36 UTC | 2026-07-29 20:44 UTC | 8.1 h | resolved |
| [app.terraform.io is not loading](https://rewindex.com/company/hashicorp/incidents/01KYTMEGH8061RBGTX8RJ394XJ.md) | major | 2026-07-30 23:06 UTC | 2026-07-31 01:26 UTC | 2.4 h | resolved |

## CVEs published

- [CVE-2026-5051](https://rewindex.com/cve/CVE-2026-5051.md) Audit Log Plugin Directory Guard Bypass via Legacy path Option (CVSS 4.4), published 2026-07-01
- [CVE-2026-14468](https://rewindex.com/cve/CVE-2026-14468.md) Path traversal allows arbitrary file read in Terraform Enterprise container (CVSS 7.7), published 2026-07-06
- [CVE-2026-14362](https://rewindex.com/cve/CVE-2026-14362.md) Denial of service via crafted push/pull gossip message in memberlist (CVSS 4.9), published 2026-07-08
- [CVE-2026-14373](https://rewindex.com/cve/CVE-2026-14373.md) Nomad Docker driver Linux host namespace bypass (CVSS 7.7), published 2026-07-08
- [CVE-2026-14891](https://rewindex.com/cve/CVE-2026-14891.md) Nomad vulnerable to sandbox escape in Docker task driver (CVSS 8.7), published 2026-07-08
- [CVE-2026-14361](https://rewindex.com/cve/CVE-2026-14361.md) Consul-template is vulnerable to path redirection in writeToFile through symlink attack (CVSS 4.7), published 2026-07-08
- [CVE-2026-14896](https://rewindex.com/cve/CVE-2026-14896.md) Nomad vulnerable to cross-namespace host volume claim deletion (CVSS 4.2), published 2026-07-08
- [CVE-2026-14869](https://rewindex.com/cve/CVE-2026-14869.md) terraform-mcp-server vulnerable to server side request forgery leading to token exposure (CVSS 8.6), published 2026-07-28
- [CVE-2026-16496](https://rewindex.com/cve/CVE-2026-16496.md) terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user (CVSS 8.9), published 2026-07-28
- [CVE-2026-16498](https://rewindex.com/cve/CVE-2026-16498.md) terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode (CVSS 10.0), published 2026-07-28
- [CVE-2026-16328](https://rewindex.com/cve/CVE-2026-16328.md) consul-mcp-server vulnerable to server side request forgery leading to token exposure (CVSS 8.6), published 2026-07-29
- [CVE-2026-16326](https://rewindex.com/cve/CVE-2026-16326.md) consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode (CVSS 10.0), published 2026-07-29

## Maintenance

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [HashiCorp Cloud Platform Requires Important Database Maintenance](https://rewindex.com/company/hashicorp/incidents/01KY30D06K2GYXZ0C2DKXZ6VVA.md) | maintenance | 2026-07-22 21:00 UTC | not resolved | ongoing | maintenance complete |
| [HashiCorp Cloud Platform Requires Important Database Maintenance](https://rewindex.com/company/hashicorp/incidents/01KYMVFQPPB7PT3HWVCR8FV7AJ.md) | maintenance | 2026-07-29 21:00 UTC | not resolved | ongoing | maintenance complete |

## Cite this

HashiCorp posted 4 status incidents in July 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/hashicorp/2026/07
- Citation: HashiCorp, “HashiCorp in July 2026” (2026-07-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/hashicorp/2026/07 (CC BY 4.0).
- Markdown link: `[HashiCorp: HashiCorp in July 2026 (2026-07-01)](https://rewindex.com/company/hashicorp/2026/07)`


---
Canonical: https://rewindex.com/company/hashicorp/2026/07 · Markdown: https://rewindex.com/company/hashicorp/2026/07.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T11:07:15.922Z