HashiCorp Nomad’s exec2 task driver versions prior to 0.1.2 contain a CWE-59 vulnerability involving improper link resolution before file access, which enables an attacker to perform arbitrary file read and write operations on the client host as the Nomad process user through a symlink attack. This vulnerability is addressed in version 0.1.2 of the exec2 task driver. The CVSS 3.1 base score is 6.0, reflecting a medium severity with local attack vector, low attack complexity, high privileges required, no user interaction, and a scope change resulting in integrity impact but no confidentiality or availability impact. The product is a cloud service, and remediation is managed by the vendor.

An attacker with high privileges on the client host can exploit this vulnerability to read and write arbitrary files as the Nomad process user by leveraging symlink attacks. This can lead to integrity violations on the affected system. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits are reported in the wild.

A fix is available in version 0.1.2 of the exec2 task driver. Since this is a cloud service, the vendor typically manages remediation server-side. Users should ensure they are running version 0.1.2 or later of the exec2 task driver. Check the vendor advisory for confirmation of remediation status and any additional guidance.