Security Bulletin: Nomad dispatch payload writes can escape the allocation directory through symlinks

Summary HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on t...

CVE-2026-107347 Nomad dispatch payload writes can escape the allocation directory through symlinks

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on the clien...

EUVD-2026-113318

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on the clien...

CVE-2026-107347

HashiCorp Nomad and Nomad Enterprise are vulnerable to a symlink following issue during dispatch payload and executor log writes. This flaw allows a malicious workload to bypass directory restrictions and modify files outside its designated allocation directory. If the client agent is running wit...

Nomad dispatch payload writes can escape the allocation directory through symlinks

Summary HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on t...

Exploit for CVE-2026-99999

CVE-2026-99999 Scanner English | 한국어 A s...

CVE-2026-102175

A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via ...

CVE-2026-28312: Improper Authorization

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is lower in Windows deployments...

CVE-2024-9050

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

CVE-2023-43478: Unrestricted Upload of File with Dangerous Type

fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution ...

PT-2022-15907

Name of the Vulnerable Software and Affected Versions NUUO NVRmini2 versions 3.11 and earlier Description The issue allows an unauthenticated attacker to upload an encrypted TAR archive. This can be abused to add arbitrary users due to the lack of authentication in handle import user.php. When...