HashiCorp Nomad Enterprise

• CVE-2026-119168 High 8.8 Nomad allocation data migration may allow host directory permission modification via symlink following 0.1%
• CVE-2026-107347 High 8.4 Nomad dispatch payload writes can escape the allocation directory through symlinks 0.1%
• CVE-2026-102260 Medium 4.3 Nomad vulnerable to cross-namespace information disclosure in multiple endpoints 0.2%
• CVE-2026-14896 Medium 4.2 Nomad vulnerable to cross-namespace host volume claim deletion 0.2%
• CVE-2026-14891 High 8.7 Nomad vulnerable to sandbox escape in Docker task driver 0.5%
• CVE-2026-14373 High 7.7 Nomad Docker driver Linux host namespace bypass 0.3%
• CVE-2026-7474 High 8.8 Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution 8.2%
• CVE-2026-6959 Medium 6.0 Nomad vulnerable to arbitrary file read/write on client host through symlink attack 0.2%
• CVE-2025-4922 High 8.1 Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job 0.5%
• CVE-2025-3744 High 7.6 Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override 0.3%
• CVE-2025-1296 Medium 6.5 Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs 0.5%
• CVE-2025-0937 High 7.1 Nomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace 0.4%
• CVE-2024-12678 Medium 6.5 Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens 0.5%
• CVE-2024-10975 High 7.7 Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission 0.4%
• CVE-2024-7625 Medium 5.8 Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking 0.3%
• CVE-2024-6717 High 7.7 Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking 0.4%
• CVE-2024-1329 High 7.7 Nomad Vulnerable to Arbitrary Write Through Symlink Attack 0.6%
• CVE-2023-3300 Medium 5.3 Nomad Search API Leaks Information About CSI Plugins 0.6%
• CVE-2023-3299 Low 3.4 Nomad Caller ACL Token's Secret ID is Exposed to Sentinel 0.6%
• CVE-2023-3072 Medium 4.1 Nomad ACL Policies without Label are Applied to Unexpected Resources 0.4%
• CVE-2023-1782 Critical 10.0 Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation 0.8%
• CVE-2023-1299 High 7.4 Nomad Job Submitter Privilege Escalation Using Workload Identity 0.5%
• CVE-2023-1296 Low 2.7 Nomad ACLs Can Not Deny Access to Workload's Own Variables 0.5%
• CVE-2023-0821 Medium 6.5 Nomad Client Vulnerable to Decompression Bombs in Artifact Block 0.8%
• CVE-2022-3867 Low 2.7 Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected 0.5%
• CVE-2022-3866 Medium 5.0 Nomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/ 0.6%