{"id":"CVE-2026-107347","kind":"vulnerability","aliases":["CVE-2026-107347"],"related":[],"title":"HashiCorp Nomad: symlink following lets a workload write outside its directory","description":"HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on the client host. This vulnerability (CVE-2026-107347) is fixed in Nomad 2.1.0 and Nomad Enterprise 2.1.0, 1.11.12, and 1.10.18.","summary":"Nomad and Nomad Enterprise follow symlinks when writing dispatch payloads and executor logs, so a malicious workload can modify files outside its allocation directory. If the client agent runs as root, this can lead to code execution as root on the client host.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kubernetes","nomad","nomad-enterprise","self-hosted"],"not_affected_if":["non-root-client","trusted-workloads-only"],"how_to_check":"- Check the Nomad client version with `nomad version` and compare it to the fixed versions.\n- Check whether the Nomad client agent runs as root on its hosts.\n- Check whether untrusted workloads can be scheduled onto those clients.","fix":"- Nomad: `2.1.0`\n- Nomad Enterprise: `2.1.0`, `1.11.12`, `1.10.18`","status":"open","published_at":"2026-10-29T18:17:21+00:00","first_seen_at":"2026-10-29T18:26:33+00:00","triaged_at":"2026-10-29T18:28:42+00:00","updated_at":"2026-10-29T18:28:42+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-29T18:28:42Z","model":"claude-haiku-5-5","output":{"fix":"- Nomad: `2.1.0`\n- Nomad Enterprise: `2.1.0`, `1.11.12`, `1.10.18`","reach":"unknown","title":"HashiCorp Nomad: symlink following lets a workload write outside its directory","impact":"high","summary":"Nomad and Nomad Enterprise follow symlinks when writing dispatch payloads and executor logs, so a malicious workload can modify files outside its allocation directory. If the client agent runs as root, this can lead to code execution as root on the client host.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["nomad","nomad-enterprise","self-hosted","kubernetes"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"malicious workload writes outside allocation directory, root code execution","analyst_note":"Confirm the attack prerequisites (whether submitting a job requires credentials) and whether the vulnerable versions are only those prior to the listed fixes, using the NVD entry.","how_to_check":"- Check the Nomad client version with `nomad version` and compare it to the fixed versions.\n- Check whether the Nomad client agent runs as root on its hosts.\n- Check whether untrusted workloads can be scheduled onto those clients.","plain_action":"","needs_analyst":true,"not_affected_if":["trusted-workloads-only","non-root-client"],"who_is_affected":"Teams running Nomad or Nomad Enterprise clients that execute workloads, especially where the client agent runs as root and where workloads from less-trusted sources can be scheduled. Clusters that run only trusted workloads on non-root clients face a lower risk. The sources do not describe further conditions.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000736,"input_tokens":4187,"output_tokens":635,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-107347':14A,17A,123C '-2026':13A,16A,122C '1.10.18':135C '1.11.12':133C '2.1.0':128C,132C 'agent':54B,103C 'alloc':49B,98C 'allow':89C 'client':53B,68B,102C,117C 'code':62B,111C 'could':108C 'cve':12A,15A,121C 'directori':11A,50B,99C 'dispatch':35B,81C 'enterpris':23B,30B,74C,131C 'execut':63B,112C 'executor':38B,84C 'file':46B,95C 'fix':125C 'follow':4A,31B,79C 'hashicorp':1A,70C 'host':26B,69B,118C 'infrastructur':18B 'kubernet':19B 'lead':60B,109C 'let':5A 'log':39B,85C 'malici':42B,91C 'may':88C 'modifi':45B,94C 'nomad':2A,20B,22B,27B,29B,71C,73C,127C,130C 'nomad-enterpris':21B 'outsid':9A,47B,96C 'payload':36B,82C 'root':57B,65B,106C,114C 'run':55B,104C 'self':25B 'self-host':24B 'symlink':3A,32B,78C 'vulner':76C,120C 'workload':7A,43B,92C 'write':8A,34B,86C","nicknames":[],"mitigations":[],"who_affected":"Teams running Nomad or Nomad Enterprise clients that execute workloads, especially where the client agent runs as root and where workloads from less-trusted sources can be scheduled. Clusters that run only trusted workloads on non-root clients face a lower risk. The sources do not describe further conditions.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T18:17:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","cvss_by":"security@hashicorp.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107347","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107347","severity":null,"published_at":"2026-10-29T18:17:21+00:00","modified_at":"2026-10-29T18:17:21+00:00","first_seen_at":"2026-10-29T18:26:33+00:00","fetched_at":"2026-10-29T18:26:33+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}