PT-2026-132770
CVE-2026-107347
·
Publicado
2026-10-29
·
Atualizado
2026-10-29
Descrição por
CVSS 3.1
8.4
AltaMétricasAV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on the client host. This vulnerability (CVE-2026-107347) is fixed in Nomad 2.1.0 and Nomad Enterprise 2.1.0, 1.11.12, and 1.10.18.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾