PT-2026-40386 · Hashicorp · Nomad

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-8052

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions HashiCorp Nomad exec2 task driver versions prior to 0.1.2

Description The exec2 task driver allows arbitrary file read and write operations on the client host with the privileges of the Nomad process user. This is possible through a symlink attack, where a symbolic link (a file that points to another file or directory) is used to access unauthorized locations on the host system.

Recommendations Update the exec2 task driver to version 0.1.2.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2026-06945

CVE-2026-8052

GHSA-WQWC-X3RC-2XW6

Affected Products

Nomad

References · 12

• https://bdu.fstec.ru/vul/2026-06945 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-8052 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-8052 · Security Note
• https://ubuntu.com/security/CVE-2026-8052 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-8052 · Security Note
• https://osv.dev/vulnerability/GHSA-wqwc-x3rc-2xw6 · Vendor Advisory
• https://github.com/hashicorp/nomad-driver-exec2 · Note
• https://github.com/hashicorp/nomad-driver-exec2/releases/tag/v0.1.2 · Note
• https://discuss.hashicorp.com/t/hcsec-2026-13-nomads-exec2-task-driver-vulnerable-to-arbitrary-file-read-write-on-client-host-through-symlink-attack/77415/1 · Note
• https://twitter.com/infoflowcloud/status/2054324912504844649 · Twitter Post
• https://twitter.com/CVEnew/status/2054324109698592842 · Twitter Post
• https://discuss.hashicorp.com/t/hcsec-2026-13-nomads-exec2-task-driver-vulnerable-to-arbitrary-file-read-write-on-client-host-through-symlink-attack/77415 · Note