Lack of data validation - Path Traversal In github.com/hashicorp/nomad-driver-exec2
Description
HashiCorp Nomad’s exec2 task driver vulnerable to a symlink attack HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-8052) is fixed in version 0.1.2 of the exec2 task driver.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 go | 0.1.2 |
Aliases
1. 2. 3. 4.
References
1. 2.