Advisories · Technology
HashiCorp Nomad Enterprise.
Every CVE that names HashiCorp Nomad Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Nomad allocation data migration may allow host directory permission modification via symlink following
- HashiCorp Nomad
- HashiCorp Nomad Enterprise
- Path traversal
- CVSS 8.4 High
Nomad dispatch payload writes can escape the allocation directory through symlinks
- HashiCorp Nomad
- HashiCorp Nomad Enterprise
- Path traversal
- CVSS 4.3 Medium
Nomad vulnerable to cross-namespace information disclosure in multiple endpoints
- HashiCorp Nomad
- HashiCorp Nomad Enterprise
- Broken access control
- CVSS 4.2 Medium
Nomad vulnerable to cross-namespace host volume claim deletion
- HashiCorp Nomad
- HashiCorp Nomad Enterprise
- Broken access control
- CVSS 8.7 High
Nomad vulnerable to sandbox escape in Docker task driver
- HashiCorp Nomad
- HashiCorp Nomad Enterprise
- Path traversal
- CVSS 7.7 High
Nomad Docker driver Linux host namespace bypass
- HashiCorp Nomad
- HashiCorp Nomad Enterprise
- Broken access control
- CVSS 7.6 High
Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override
- HashiCorp Nomad Enterprise
- Privilege escalation
- CVSS 7.1 High
Nomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace
- HashiCorp Nomad
- HashiCorp Nomad Enterprise
- Broken access control