Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: HashiCorp Nomad, Nomad Enterprise 2.0.4 Clear all filters
TI-2026-12552 CVE-2026-14896 · GHSA-x2cv-wq6v-3cc9

Nomad vulnerable to cross-namespace host volume claim deletion

Priority LOW 19

HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volumes feature that may allow an operator holding the host volume delete permission in one namespace to d…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.0025 Published 2026-07-08 Fixed in 2.0.4 CWE-863
TI-2026-12547 CVE-2026-14891 · GHSA-5c56-jfhx-4gcm

Nomad vulnerable to sandbox escape in Docker task driver

Priority MEDIUM 40

HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, poten…

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00487 Published 2026-07-08 Fixed in 2.0.4 CWE-59
TI-2026-12152 CVE-2026-14373 · GHSA-2cc5-jjc3-x9fw

Nomad Docker driver Linux host namespace bypass

Priority LOW 34

HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the Docker task driver's host namespace mode options.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0034 Published 2026-07-08 Fixed in 2.0.4 CWE-862