Skip to contentHashicorp Nomad Enterprise vulnerabilities
- hashicorp nomad, nomad enterprise +1 moreNomad allocation data migration may allow host directory permission modification via symlink followingCVE-2026-1191688.8 High
- hashicorp nomad, nomad enterprise +1 moreNomad dispatch payload writes can escape the allocation directory through symlinksCVE-2026-1073478.4 High
- hashicorp nomad, nomad enterprise +1 moreNomad vulnerable to cross-namespace information disclosure in multiple endpointsCVE-2026-1022604.3 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad vulnerable to cross-namespace host volume claim deletionCVE-2026-148964.2 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad vulnerable to sandbox escape in Docker task driverCVE-2026-148918.7 High
- hashicorp nomad, nomad enterprise +1 moreNomad Docker driver Linux host namespace bypassCVE-2026-143737.7 High
- hashicorp nomad, nomad enterprise +1 moreNomad vulnerable to path traversal in dynamic host volume which may lead to code executionCVE-2026-7474Fix available8.8 High
- hashicorp nomad, nomad enterprise +1 moreNomad vulnerable to arbitrary file read/write on client host through symlink attackCVE-2026-6959Fix available6.0 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable To Incorrect ACL Policy Lookup Attached To A JobCVE-2025-4922Fix available8.1 High
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy OverrideCVE-2025-37447.6 High
- hashicorp nomad, nomad enterprise +1 moreNomad Exposes Sensitive Workload Identity and Client Secret Token in Audit LogsCVE-2025-1296Fix available6.5 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard NamespaceCVE-2025-09377.1 High
- hashicorp nomad, nomad enterprise +1 moreNomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity TokensCVE-2024-12678Fix available6.5 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write PermissionCVE-2024-10975Fix available7.7 High
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive UnpackingCVE-2024-7625Fix available5.8 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable to Allocation Directory Path Escape Through Archive UnpackingCVE-2024-6717Fix available7.7 High
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable to Arbitrary Write Through Symlink AttackCVE-2024-1329Fix available7.7 High
- hashicorp nomad, nomad enterprise +1 moreNomad Search API Leaks Information About CSI PluginsCVE-2023-3300Fix available5.3 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Caller ACL Token's Secret ID is Exposed to SentinelCVE-2023-3299Fix available3.4 Low
- hashicorp nomad, nomad enterprise +1 moreNomad ACL Policies without Label are Applied to Unexpected ResourcesCVE-2023-3072Fix available4.1 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Unauthenticated Client Agent HTTP Request Privilege EscalationCVE-2023-1782Fix available10.0 Critical
- hashicorp nomad, nomad enterprise +1 moreNomad Job Submitter Privilege Escalation Using Workload IdentityCVE-2023-1299Fix available7.4 High
- hashicorp nomad, nomad enterprise +1 moreNomad ACLs Can Not Deny Access to Workload's Own VariablesCVE-2023-1296Fix available2.7 Low
- hashicorp nomad, nomad enterprise +1 moreNomad Client Vulnerable to Decompression Bombs in Artifact BlockCVE-2023-0821Fix available6.5 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage CollectedCVE-2022-3867Fix available2.7 Low
- hashicorp nomad, nomad enterprise +1 moreNomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/CVE-2022-3866Fix available5.0 Medium