Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/nomad

34 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-6959

    Nomad vulnerable to arbitrary file read/write on client host through symlink attack

    HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-6959) is fixed in Nomad 2.0.1, 1.11.5 and 1.10.11.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go
  • Medium 6.5
    CVE-2025-1296

    Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs

    Nomad Community and Nomad Enterprise (“Nomad”) are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. This vulnerability, identified as CVE-2025-1296, is fixed in Nomad Community Edition 1.9.7 and Nomad …

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go
  • Medium 6.5
    CVE-2024-12678

    Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens

    Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and N…

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go
  • Medium 5.8
    CVE-2024-7625

    Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking

    In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same…

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go
  • Medium 5.3
    CVE-2023-3300

    Nomad Search API Leaks Information About CSI Plugins

    HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go
  • Medium 4.1
    CVE-2023-3072

    Nomad ACL Policies without Label are Applied to Unexpected Resources

    HashiCorp Nomad and Nomad Enterprise 0.7.0 up to 1.5.6 and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go
  • Medium 6.5
    CVE-2023-0821

    Nomad Client Vulnerable to Decompression Bombs in Artifact Block

    HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go
  • Medium 5.3
    CVE-2019-14802

    Hashicorp Nomad Information Exposure Through Environmental Variables

    HashiCorp Nomad 0.5.0 through 0.9.4 (fixed in 0.9.5) reveals unintended environment variables to the rendering task during template rendering, aka GHSA-6hv3-7c34-4hx8. This applies to nomad/client/allocrunner/taskrunner/template.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 5.0
    CVE-2022-3866

    Nomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/

    HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under nomad/ that belong to other jobs in the same namespace. Fixed in 1.4.2.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go
  • Medium 6.5
    CVE-2022-41606

    Nomad Panics On Job Submission With Bad Artifact Stanza Source URL

    HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash client agents. Fixed in 1.2.13, 1.3.6, and 1.4.0.

    nomad github.com/hashicorp/nomad Ubuntu Go
  • Medium 6.5
    CVE-2022-24684

    Nomad Spread Job Stanza May Trigger Panic in Servers

    HashiCorp Nomad and Nomad Enterprise 0.9.0 through 1.0.16, 1.1.11, and 1.2.5 allow operators with job-submit capabilities to use the spread stanza to panic server agents. Fixed in 1.0.18, 1.1.12, and 1.2.6.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 5.9
    CVE-2022-24686

    HashiCorp Nomad Artifact Download Race Condition

    HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. Fixed in 1.0.18, 1.1.12, and 1.2.6

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 6.5
    CVE-2021-32575

    Improper network isolation in Hashicorp Nomad

    HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • Medium 6.5
    CVE-2020-28348

    Path Traversal in HashiCorp Nomad

    HashiCorp Nomad and Nomad Enterprise 0.9.0 up to 0.12.7 client Docker file sandbox feature may be subverted when not explicitly disabled or when using a volume mount type. Fixed in 0.12.8, 0.11.7, and 0.10.8.

    github.com/hashicorp/nomad nomad Alpine Go