Opentofu 1.x — End of Life
ActiveOpentofu 1.x is partially supported: only 1.13, 1.12 still receive security fixes, the longest-lived (1.13) until Aug 1, 2027, in 298 days. The most recent release in this series is 1.13.1. No CVE is currently tracked for Opentofu 1.x.
Opentofu 1.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 1.13 | Sep 30, 2026 | — | Aug 1, 2027 | 1.13.1 | Active | |
| 1.12 | May 14, 2026 | — | Feb 1, 2027 | 1.12.7 | Active | |
| 1.11 | Dec 9, 2025 | — | Aug 19, 2026 | 1.11.14 | EOL | |
| 1.10 | Jun 24, 2025 | — | Sep 30, 2026 | 1.10.10 | EOL | |
| 1.9 | Jan 9, 2025 | — | May 14, 2026 | 1.9.4 | EOL | |
| 1.8 | Jul 29, 2024 | — | Dec 9, 2025 | 1.8.11 | EOL | |
| 1.7 | Apr 30, 2024 | — | Jun 24, 2025 | 1.7.10 | EOL | |
| 1.6 | Jan 9, 2024 | — | Jan 9, 2025 | 1.6.3 | EOL |
CVEs affecting Opentofu 1.x (0)
Add a Opentofu 1 EOL badge to your README
Show your users which Opentofu version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/opentofu/1)Frequently asked questions
Is Opentofu 1 end of life?
Partially. 6 of the 8 Opentofu 1.x releases have reached end of life. Still supported: 1.13, 1.12 (until August 1, 2027 at the latest).
What CVEs affect Opentofu 1?
No CVEs are currently tracked for Opentofu 1.x in the NVD data we monitor.
What is the latest Opentofu 1 version?
The latest Opentofu 1.x patch release is 1.13.1, released on October 1, 2026. Always run the latest patch to benefit from all security fixes.
When was Opentofu 1 first released?
Opentofu 1.6 was released on January 9, 2024. See the full version timeline in the table above.
Is it safe to run Opentofu 1 in production?
Only on a supported release (1.13, 1.12). Support for Opentofu 1.13 ends on August 1, 2027. Make sure you run the latest patch (1.13.1) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA