NE
Product
Nomad Enterprise
by HashiCorp · last CVE Oct 29, 2026
17
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 11Medium 6Low 0
Watch

Add Nomad Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-119168
New
8.8–Oct 29
Nomad allocation data migration may allow host directory permission modification via symlink following
Affected: 0.5.3 before 2.1.0
CVE-2026-7474
8.8
8%
May 12
Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution
Affected: 1.10.0 before 2.0.1
CVE-2026-14891
8.7
0%
Jul 8
Nomad vulnerable to sandbox escape in Docker task driver
Affected: 0.4.1 before 2.0.4
CVE-2024-6717
8.6
0%
Jul 23
Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking
Affected: before 1.8.2
CVE-2026-107347
New
8.4–Oct 29
Nomad dispatch payload writes can escape the allocation directory through symlinks
Affected: 0.3.0 before 2.1.0
CVE-2025-4922
8.1
1%
Jun 11
Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job
Affected: 1.4.0 before 1.10.2
CVE-2026-14373
7.7
0%
Jul 8
Nomad Docker driver Linux host namespace bypass
Affected: 0.4.1 before 2.0.4
CVE-2024-10975
7.7
0%
Nov 7
Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission
Affected: 1.3.0 before 1.9.2
CVE-2025-3744
7.6
0%
May 13
Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override
Affected: before 1.10.1
CVE-2024-1329
7.5
1%
Feb 8
Nomad Vulnerable to Arbitrary Write Through Symlink Attack
Affected: through 1.5.13; through 1.6.6; through 1.7.3
CVE-2025-0937
7.1
0%
Feb 12
Nomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace
Affected: 1.0.0 before 1.9.6
Showing 11