Nomad allocation data migration may allow host directory permission modification via symlink following

Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution

Nomad vulnerable to sandbox escape in Docker task driver

Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking

Nomad dispatch payload writes can escape the allocation directory through symlinks

Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job

Nomad Docker driver Linux host namespace bypass

Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission

Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override

Nomad Vulnerable to Arbitrary Write Through Symlink Attack

Nomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace

Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs

Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens

Nomad vulnerable to arbitrary file read/write on client host through symlink attack

Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking

Nomad vulnerable to cross-namespace information disclosure in multiple endpoints

Nomad vulnerable to cross-namespace host volume claim deletion