Topics tagged security-nomad

Topic	Views	Activity
HCSEC-2026-22 - Nomad vulnerable to cross-namespace host volume claim deletion Security security-nomad	107	July 8, 2026
HCSEC-2026-21 - Nomad vulnerable to sandbox escape in Docker task driver Security security-nomad	122	July 8, 2026
HCSEC-2026-19 - Nomad Docker driver vulnerable to host namespace bypass on Linux Security security-nomad	107	July 8, 2026
HCSEC-2026-18 - Memberlist vulnerable to denial of service via gossip message Security security-nomad , security-consul	118	July 8, 2026
HCSEC-2026-15 - Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution Security security-nomad	409	May 12, 2026
HCSEC-2026-14 - Nomad arbitrary file read/write on client host through symlink attack Security security-nomad	193	May 12, 2026
HCSEC-2026-13 - Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack Security security-nomad	216	May 12, 2026
HCSEC-2025-12 - Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job Security security-nomad	949	June 11, 2025
HCSEC-2025-08 - Nomad Enterprise Vulnerable To Violation Of Mandatory Sentinel Policies in Job Submissions via Policy Override Security security-nomad	682	May 13, 2025
HCSEC-2025-04 - Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs Security security-nomad	763	March 10, 2025
HCSEC-2025-02 - Nomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace Security security-nomad	647	February 12, 2025
HCSEC-2024-29 - Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Token Security security-nomad	665	December 20, 2024
HCSEC-2024-27 - Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission Security security-nomad	900	November 7, 2024
HCSEC-2023-21 - Nomad Caller ACL Token's Secret ID is Exposed to Sentinel Security security-nomad	5704	July 19, 2023
HCSEC-2024-17 - Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking Security security-nomad	1431	August 14, 2024
HCSEC-2024-15 - Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking Security security-nomad	1397	July 22, 2024
HCSEC-2024-03 - Nomad Vulnerable to Arbitrary Write Through Symlink Attack Security security-nomad	6638	February 8, 2024
HCSEC-2023-22 - Nomad Search API Leaks Information About CSI Plugins Security security-nomad	5837	July 19, 2023
HCSEC-2023-20 - Nomad ACL Policies without Label are Applied to Unexpected Resources Security security-nomad	5911	July 19, 2023
HCSEC-2021-01 - Nomad’s Exec and Java Task Drivers Did Not Isolate Processes Security security-nomad	7392	January 29, 2021
HCSEC-2023-09 - Nomad ACLs Can Not Deny Access to Workload's Own Variables Security security-nomad	5345	March 13, 2023
HCSEC-2023-08 - Nomad Job Submitter Privilege Escalation Using Workload Identity Security security-nomad	5379	March 13, 2023
HCSEC-2022-25 - Nomad’s Workload Identity Token Can List Non-sensitive Metadata For nomad/ Paths Security security-nomad	6007	October 28, 2022
HCSEC-2022-26 - Nomad’s Event Stream Subscriber Using ACL Token with TTL Receive Updates Until Garbage Collected Security security-nomad	5949	October 28, 2022
HCSEC-2022-22 - Nomad Panics On Job Submission With Bad Artifact Stanza Source URL Security security-nomad	5906	October 10, 2022
HCSEC-2022-14 - Nomad Impacted by go-getter Vulnerabilities Security security-nomad	6965	May 24, 2022
HCSEC-2022-04 - Nomad Spread Job Stanza May Trigger Panic in Servers Security security-nomad	7618	February 11, 2022
HCSEC-2022-03 - Nomad Malformed Job Parsing Results in Excessive CPU Usage Security security-nomad	7251	February 11, 2022
HCSEC-2022-02 - Nomad alloc Filesystem and Container Escape Security security-nomad	7328	February 11, 2022
HCSEC-2022-01 - Nomad Artifact Download Race Condition Security security-nomad	7556	February 11, 2022