← Database

CVE-2026-8052

MEDIUM CVSS: 6.0 Published: 2026-05-12 Modified: 2026-06-17

Description

HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-8052) is fixed in version 0.1.2 of the exec2 task driver.

Affected Platforms

Unknown

Weakness Type

CWE-59

References