CVE record · 1 source
CVE-2026-107347
CVSS 8.4HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious…
- Vendor
- HashiCorp
- Product
- Nomad, Nomad Enterprise
- CVSS v3.1
- 8.4 AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
- Weakness
- CWE-59
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious…
HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent…