CVE-2024-6717

Name of the Vulnerable Software and Affected Versions HashiCorp Nomad and Nomad Enterprise versions 1.6.12 through 1.7.9 HashiCorp Nomad and Nomad Enterprise version 1.8.1

Description The issue concerns archive unpacking during migration, where path escaping of the allocation directory is possible. This allows for potential exploitation. The estimated number of potentially affected devices worldwide is not specified. Details about real-world incidents where this issue was exploited are not provided.

Recommendations For HashiCorp Nomad and Nomad Enterprise versions 1.6.12 through 1.7.9, update to version 1.7.10 or later to resolve the issue. For HashiCorp Nomad and Nomad Enterprise version 1.8.1, update to version 1.8.2 or later to resolve the issue.