Hashicorp · Nomad · CVE-2026-14373
**Name of the Vulnerable Software and Affected Versions**
Nomad Community Edition versions prior to 2.0.4
Nomad Enterprise versions prior to 2.0.4
Nomad Enterprise versions prior to 1.11.8
Nomad Enterprise versions prior to 1.10.14
**Description**
HashiCorp Nomad and Nomad Enterprise failed to enforce the `allow privileged` restriction for the Docker task driver's host namespace mode options. This flaw allows an authenticated job submitter to execute a container within a host namespace, potentially granting unauthorized access to information on the host or other workloads residing on the same client.
**Recommendations**
Update Nomad Community Edition to version 2.0.4.
Update Nomad Enterprise to version 2.0.4, 1.11.8, or 1.10.14.