HIGHCVSS v3.1 8.8Vulnerability
CVE-2026-119168
HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access to host data or modification of host files, potentially leading to privilege escalation. This vulnerability (CVE-2026-119168) is fixed in Nomad 2.1.0 and Nomad Enterprise 2.1.0, 1.11.12, and 1.10.18.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-10-29T19:54:00.882258+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.8
- Retrieved at
- 2026-10-29T19:54:43+00:00
- Score
- 8.8
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-119168
- Cvss vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- First seen by Signal
- 2026-10-29T19:54:43+00:00
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Published at
- 2026-10-29T19:17:21.120
- Last modified
- 2026-10-29T19:17:21.120
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph