diff --git a/provisioner/terraform/install.go b/provisioner/terraform/install.go
index 778c80e67a944..49059e7517293 100644
--- a/provisioner/terraform/install.go
+++ b/provisioner/terraform/install.go
@@ -19,10 +19,10 @@ var (
 	// TerraformVersion is the version of Terraform used internally
 	// when Terraform is not available on the system.
 	// NOTE: Keep this in sync with the version in scripts/Dockerfile.base.
-	TerraformVersion = version.Must(version.NewVersion("1.3.4"))
+	TerraformVersion = version.Must(version.NewVersion("1.4.6"))
 
 	minTerraformVersion = version.Must(version.NewVersion("1.1.0"))
-	maxTerraformVersion = version.Must(version.NewVersion("1.3.9"))
+	maxTerraformVersion = version.Must(version.NewVersion("1.4.9"))
 
 	terraformMinorVersionMismatch = xerrors.New("Terraform binary minor version mismatch.")
 )
diff --git a/scripts/Dockerfile.base b/scripts/Dockerfile.base
index 6dd3daea4019d..b89019e9c9211 100644
--- a/scripts/Dockerfile.base
+++ b/scripts/Dockerfile.base
@@ -1,7 +1,7 @@
 # This is the base image used for Coder images. It's a multi-arch image that is
 # built in depot.dev for all supported architectures. Since it's built on real
 # hardware and not cross-compiled, it can have "RUN" commands.
-FROM alpine:latest
+FROM alpine:3.18
 
 # We use a single RUN command to reduce the number of layers in the image.
 # NOTE: Keep the Terraform version in sync with minTerraformVersion and
@@ -12,7 +12,7 @@ RUN apk add --no-cache \
 		bash \
 		git \
 		openssh-client \
-		terraform=1.3.4-r4 && \
+		terraform=1.4.6-r1 && \
 	addgroup \
 		-g 1000 \
 		coder && \