6.0
Moyenne
CVE-2026-8052 HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host…
Description
HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-8052) is fixed in version 0.1.2 of the exec2 task driver.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Shared library 0.1 | 0.1.0 → < 0.1.2 | 0.1.2 |
Autres CVE de Shared library
Les 10 CVE de Shared library →
CVE-2026-19585
HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal…
5.3
Moyenne
CVE-2026-88922
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive…
6.7
Moyenne
CVE-2026-14362
HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling…
4.9
Moyenne
CVE-2026-0969
The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to…
8.8
Élevée