Threats tagged 'ghsa-hwr3-7cq5-x5mf'

HashiCorp Nomad and Nomad Enterprise contain a vulnerability involving symlink following during same-client allocation data migration. This flaw allows a malicious workload to change permissions and ownership of host directories, potentially enabling unauthorized access or modification of host files and leading to privilege escalation. The issue is tracked as CVE-2026-119168 and has a high severity rating.