---
id: "CVE-2026-107347"
kind: "vulnerability"
aliases: ["CVE-2026-107347"]
title: "HashiCorp Nomad: symlink following lets a workload write outside its directory"
severity: "high"
cvss: 8.4
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "kubernetes", "nomad", "nomad-enterprise", "self-hosted"]
not_affected_if: ["non-root-client", "trusted-workloads-only"]
published_at: "2026-10-29T18:17:21+00:00"
first_seen_at: "2026-10-29T18:26:33+00:00"
updated_at: "2026-10-29T18:28:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107347", "first_seen_at": "2026-10-29T18:26:33+00:00"}]
---

# HashiCorp Nomad: symlink following lets a workload write outside its directory

Nomad and Nomad Enterprise follow symlinks when writing dispatch payloads and executor logs, so a malicious workload can modify files outside its allocation directory. If the client agent runs as root, this can lead to code execution as root on the client host.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Nomad client version with `nomad version` and compare it to the fixed versions.
- Check whether the Nomad client agent runs as root on its hosts.
- Check whether untrusted workloads can be scheduled onto those clients.

## Fix

- Nomad: `2.1.0`
- Nomad Enterprise: `2.1.0`, `1.11.12`, `1.10.18`

## Timeline

- 2026-10-29T18:26:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107347

## From the sources

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on the client host. This vulnerability (CVE-2026-107347) is fixed in Nomad 2.1.0 and Nomad Enterprise 2.1.0, 1.11.12, and 1.10.18.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_