CVE-2026-119168

A flaw was found in Nomad. This vulnerability can lead to privilege escalation when the service improperly follows symbolic links symlinks during same-client allocation data migration. An attacker running a malicious workload can exploit this flaw to modify the ownership and permissions of host...

Security Bulletin: Nomad allocation data migration may allow host directory permission modification via symlink following

Summary HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access to host data or modification of host file...