Deniz Onur Duzgun

**Name of the Vulnerable Software and Affected Versions** Nomad Community Edition versions prior to 2.0.4 Nomad Enterprise versions prior to 2.0.4 Nomad Enterprise versions prior to 1.11.8 Nomad Enterprise versions prior to 1.10.14 **Description** HashiCorp Nomad and Nomad Enterprise failed to enforce the `allow privileged` restriction for the Docker task driver's host namespace mode options. This flaw allows an authenticated job submitter to execute a container within a host namespace, potentially granting unauthorized access to information on the host or other workloads residing on the same client. **Recommendations** Update Nomad Community Edition to version 2.0.4. Update Nomad Enterprise to version 2.0.4, 1.11.8, or 1.10.14.