CVE record · 1 source
CVE-2026-119168
CVSS 8.8HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious…
- Vendor
- HashiCorp
- Product
- Nomad, Nomad Enterprise
- CVSS v3.1
- 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weakness
- CWE-59
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious…
HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow…