6.0
Medium
CVE-2026-8052 HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host…
Description
HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-8052) is fixed in version 0.1.2 of the exec2 task driver.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Shared library 0.1 | 0.1.0 → < 0.1.2 | 0.1.2 |
Other CVEs of Shared library
The 10 CVEs of Shared library →
CVE-2026-19585
HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal…
5.3
Medium
CVE-2026-88922
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive…
6.7
Medium
CVE-2026-14362
HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling…
4.9
Medium
CVE-2026-0969
The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to…
8.8
High