wiz.io/blog· Sep 23, 2025· by Gilad Berenblut

Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap

Open Original Article ↗
Announcing the GA of our HCP Terraform connector, featuring new zero-configuration code-to-cloud mapping that traces any cloud risk back to its source.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.