HCSEC-2026-52 - Nomad dispatch payload writes can escape the allocation directory through symlinks
// AI summary
HashiCorp Nomad and Nomad Enterprise up to 2.0.7 are vulnerable to symlink following during dispatch payload writes, allowing a malicious workload to modify files outside its allocation directory.
// from the source
Bulletin ID: HCSEC-2026-52 Affected Products / Versions: Nomad and Nomad Enterprise up to 2.0.7; fixed in Nomad 2.1.0 and Nomad Enterprise 2.1.0, 1.11.12, and 1.10.18. Publication Date: October 29, 2026 Summary HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on t