CVE-2025-13432 is a vulnerability in Terraform Enterprise that allows a user with specific but insufficient permissions to create Terraform state versions in a workspace. This could enable alteration of infrastructure if a subsequent plan operation is approved by a user with approval permissions or if the plan is auto-applied. The issue is fixed in Terraform Enterprise versions 1.1.1 and 1.0.3.