Cevnitra
Cevnitra

Explore Cevnitra

Explore Cevnitra

Find the risk.
Focus the fix.

Bring your applications and infrastructure into focus.

Scan Now
Already have an account? Log in
All security reports
NVD security advisoryHigh

High advisory for HashiCorp Nomad and Nomad Enterprise are

CVE-2026-119168 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

HashiCorp Nomad and Nomad Enterprise areAffected product

Advisory overview

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access to host data or modification of host files, potentially leading to privilege escalation. This vulnerability (CVE-2026-119168) is fixed in Nomad 2.1.0 and Nomad Enterprise 2.1.0, 1.11.12, and 1.10.18.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data mi | Security report | Cevnitra