PT-2026-40384 · Hashicorp · Nomad+1

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-6959

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions HashiCorp Nomad versions prior to 2.0.1 HashiCorp Nomad Enterprise versions prior to 2.0.1

Description An issue exists that allows arbitrary file read and write operations on the client host with the privileges of the Nomad process user. This is achieved through a symlink attack, where a symbolic link (a file that points to another file or directory) is used to access unauthorized locations on the host system.

Recommendations Update HashiCorp Nomad to version 2.0.1, 1.11.5, or 1.10.11. Update HashiCorp Nomad Enterprise to version 2.0.1, 1.11.5, or 1.10.11.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2026-06944

CVE-2026-6959

GHSA-3934-423W-4JQ3

Affected Products

Nomad

Nomad Enterprise

References · 11

• https://ubuntu.com/security/CVE-2026-6959 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-6959 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-6959 · Security Note
• https://osv.dev/vulnerability/GHSA-3934-423w-4jq3 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-6959 · Security Note
• https://bdu.fstec.ru/vul/2026-06944 · Security Note
• https://github.com/hashicorp/nomad/releases/tag/v2.0.1 · Note
• https://github.com/hashicorp/nomad/commit/2a09fd62c23880ff306499ae03fe64628d82a23f · Note
• https://github.com/hashicorp/nomad · Note
• https://discuss.hashicorp.com/t/hcsec-2026-14-nomad-arbitrary-file-read-write-on-client-host-through-symlink-attack/77416 · Note
• https://twitter.com/CVEnew/status/2054340943323578406 · Twitter Post