Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Nomad — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in Nomad, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for HashiCorp Nomad, a distributed system orchestrator, focusing on configuration flaws and privilege escalation weaknesses tagged under container runtime security. The collection encompasses publicly disclosed security issues ranging from early 2017 to the present, covering a diverse spectrum of defects including unauthorized access, denial of service, and information disclosure. Visitors can utilize this resource to track the vendor's official security advisories, analyze the prevalence of specific weakness classes within orchestration platforms, or review the complete historical record of vulnerabilities affecting the Nomad product line. The data supports security teams in performing risk assessments, planning remediation strategies, and understanding the evolution of threats targeting distributed computing environments. By centralizing these findings, the page offers a clear view of the product's security posture over time without requiring access to multiple external databases. Users seeking to harden their infrastructure or audit their deployments will find this compilation essential for maintaining a robust defense against known exploits. The information presented is derived from trusted sources and updated regularly to reflect the latest disclosures in the cybersecurity community.

Vendor: HashiCorp

CVE ID Title CVSS Severity Published
CVE-2026-14896 Nomad vulnerable to cross-namespace host volume claim deletion CWE-863 4.2 Medium 2026-07-08
CVE-2026-14891 Nomad vulnerable to sandbox escape in Docker task driver CWE-59 8.7 High 2026-07-08
CVE-2026-14373 Nomad Docker driver Linux host namespace bypass CWE-862 7.7 High 2026-07-08
CVE-2026-7474 Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution CWE-22 8.8 High 2026-05-12
CVE-2026-6959 Nomad vulnerable to arbitrary file read/write on client host through symlink attack CWE-59 6.0 Medium 2026-05-12
CVE-2025-4922 Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job CWE-266 8.1 High 2025-06-11
CVE-2025-1296 Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs CWE-532 6.5 Medium 2025-03-10
CVE-2025-0937 Nomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace CWE-863 7.1 High 2025-02-12
CVE-2024-12678 Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens CWE-266 6.5 Medium 2024-12-20
CVE-2024-10975 Nomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission CWE-863 7.7 High 2024-11-07
CVE-2024-7625 Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking CWE-610 5.8 Medium 2024-08-14
CVE-2024-6717 Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking CWE-610 7.7 High 2024-07-23
CVE-2024-1329 Nomad Vulnerable to Arbitrary Write Through Symlink Attack CWE-59 7.7 High 2024-02-08
CVE-2023-3300 Nomad Search API Leaks Information About CSI Plugins CWE-266 5.3 Medium 2023-07-19
CVE-2023-3072 Nomad ACL Policies without Label are Applied to Unexpected Resources CWE-266 4.1 Medium 2023-07-19
CVE-2023-1782 Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation CWE-862 10.0 Critical 2023-04-05
CVE-2023-1299 Nomad Job Submitter Privilege Escalation Using Workload Identity CWE-862 7.4 High 2023-03-14
CVE-2023-1296 Nomad ACLs Can Not Deny Access to Workload's Own Variables CWE-682 2.7 Low 2023-03-14
CVE-2023-0821 Nomad Client Vulnerable to Decompression Bombs in Artifact Block CWE-409 6.5 Medium 2023-02-16
CVE-2022-3867 Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected CWE-613 2.7 Low 2022-11-10
CVE-2022-3866 Nomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/ CWE-668 5.0 Medium 2022-11-10

All 21 known CVE vulnerabilities affecting Nomad with full Chinese analysis, references, and POCs where available.