Suggestions search

All statuses

Filter by:

With package: nomad-autoscaler

Found 3 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-14896

4.2 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

created 6 days, 20 hours ago Activity log

Created suggestion 6 days, 20 hours ago

Nomad vulnerable to cross-namespace host volume claim deletion

HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volumes feature that may allow an operator holding the host volume delete permission in one namespace to delete a sticky volume claim belonging to a job in another namespace. This vulnerability, CVE-2026-14896, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.

References

https://discuss.hashicorp.com/t/hcsec-2026-22-nomad-vulnerable-to-cross-namespa…

Affected products

Nomad

<2.0.4

Nomad Enterprise

<2.0.4

Matching in nixpkgs

pkgs.nomad

Distributed, Highly Available, Datacenter-Aware Scheduler

nixos-unstable 1.11.3
- nixpkgs-unstable 1.11.3
- nixos-unstable-small 1.11.3
nixos-26.05 1.11.3
- nixos-26.05-small 1.11.3
- nixpkgs-26.05-darwin 1.11.3

pkgs.nomadnet

Off-grid, resilient mesh communication

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.6

pkgs.git-nomad

Synchronize work-in-progress git branches in a light weight fashion

nixos-unstable 0.9.0
- nixpkgs-unstable 0.9.0
- nixos-unstable-small 0.9.0
nixos-26.05 0.9.0
- nixos-26.05-small 0.9.0
- nixpkgs-26.05-darwin 0.9.0

pkgs.nomad_1_9

Distributed, Highly Available, Datacenter-Aware Scheduler

nixos-unstable 1.9.7
- nixpkgs-unstable 1.9.7
- nixos-unstable-small 1.9.7
nixos-26.05 1.9.7
- nixos-26.05-small 1.9.7
- nixpkgs-26.05-darwin 1.9.7

pkgs.nomad-pack

Nomad Pack is a templating and packaging tool used with HashiCorp Nomad

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2
nixos-26.05 0.4.2
- nixos-26.05-small 0.4.2
- nixpkgs-26.05-darwin 0.4.2

pkgs.nomad_1_10

Distributed, Highly Available, Datacenter-Aware Scheduler

nixos-unstable 1.10.5
- nixpkgs-unstable 1.10.5
- nixos-unstable-small 1.10.5
nixos-26.05 1.10.5
- nixos-26.05-small 1.10.5
- nixpkgs-26.05-darwin 1.10.5

pkgs.nomad_1_11

Distributed, Highly Available, Datacenter-Aware Scheduler

nixos-unstable 1.11.3
- nixpkgs-unstable 1.11.3
- nixos-unstable-small 1.11.3
nixos-26.05 1.11.3
- nixos-26.05-small 1.11.3
- nixpkgs-26.05-darwin 1.11.3

pkgs.nomad-autoscaler

Autoscaling daemon for Nomad

nixos-unstable 0.3.6
- nixpkgs-unstable 0.3.6
- nixos-unstable-small 0.3.6
nixos-26.05 0.3.6
- nixos-26.05-small 0.3.6
- nixpkgs-26.05-darwin 0.3.6

pkgs.nomad-driver-podman

Podman task driver for Nomad

nixos-unstable 0.6.4
- nixpkgs-unstable 0.6.4
- nixos-unstable-small 0.6.4
nixos-26.05 0.6.4
- nixos-26.05-small 0.6.4
- nixpkgs-26.05-darwin 0.6.4

pkgs.nomad-driver-containerd

Containerd task driver for Nomad

nixos-unstable 0.9.4
- nixpkgs-unstable 0.9.4
- nixos-unstable-small 0.9.4
nixos-26.05 0.9.4
- nixos-26.05-small 0.9.4
- nixpkgs-26.05-darwin 0.9.4

pkgs.terraform-providers.nomad

None

nixos-unstable 2.6.1
- nixpkgs-unstable 2.6.1
- nixos-unstable-small 2.6.1
nixos-26.05 2.6.1
- nixos-26.05-small 2.6.1
- nixpkgs-26.05-darwin 2.6.1

pkgs.python313Packages.nomadnet

Off-grid, resilient mesh communication

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.6
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

pkgs.python314Packages.nomadnet

Off-grid, resilient mesh communication

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.6
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

pkgs.python313Packages.python-nomad

Python client library for Hashicorp Nomad

nixos-unstable 2.1.0
- nixpkgs-unstable 2.1.0
- nixos-unstable-small 2.1.0
nixos-26.05 2.1.0
- nixos-26.05-small 2.1.0
- nixpkgs-26.05-darwin 2.1.0

pkgs.python314Packages.python-nomad

Python client library for Hashicorp Nomad

nixos-unstable 2.1.0
- nixpkgs-unstable 2.1.0
- nixos-unstable-small 2.1.0
nixos-26.05 2.1.0
- nixos-26.05-small 2.1.0
- nixpkgs-26.05-darwin 2.1.0

pkgs.terraform-providers.hashicorp_nomad

None

nixos-unstable 2.6.1
- nixpkgs-unstable 2.6.1
- nixos-unstable-small 2.6.1
nixos-26.05 2.6.1
- nixos-26.05-small 2.6.1
- nixpkgs-26.05-darwin 2.6.1

Package maintainers

@rraval Ronuk Raval <ronuk.raval@gmail.com>
@techknowlogick techknowlogick <techknowlogick@gitea.com>
@rushmorem Rushmore Mushambi <rushmore@webenchanter.com>
@cottand Nico D'Cotta <nico@dcotta.com>
@cpcloud Phillip Cloud
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@drupol Pol Dellaiera <pol.dellaiera@protonmail.com>
@xbreak Calle Rosenquist <xbreak@alphaware.se>

Untriaged

Permalink CVE-2026-14891

8.7 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 6 days, 20 hours ago Activity log

Created suggestion 6 days, 20 hours ago

Nomad vulnerable to sandbox escape in Docker task driver

HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to reading and writing files on the host. This vulnerability, CVE-2026-14891, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.

References

https://discuss.hashicorp.com/t/hcsec-2026-21-nomad-vulnerable-to-sandbox-escap…

Affected products

Nomad

<2.0.4

Nomad Enterprise

<2.0.4

Matching in nixpkgs

pkgs.nomad

Distributed, Highly Available, Datacenter-Aware Scheduler

nixos-unstable 1.11.3
- nixpkgs-unstable 1.11.3
- nixos-unstable-small 1.11.3
nixos-26.05 1.11.3
- nixos-26.05-small 1.11.3
- nixpkgs-26.05-darwin 1.11.3

pkgs.nomadnet

Off-grid, resilient mesh communication

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.6

pkgs.git-nomad

Synchronize work-in-progress git branches in a light weight fashion

nixos-unstable 0.9.0
- nixpkgs-unstable 0.9.0
- nixos-unstable-small 0.9.0
nixos-26.05 0.9.0
- nixos-26.05-small 0.9.0
- nixpkgs-26.05-darwin 0.9.0

pkgs.nomad_1_9

Distributed, Highly Available, Datacenter-Aware Scheduler

nixos-unstable 1.9.7
- nixpkgs-unstable 1.9.7
- nixos-unstable-small 1.9.7
nixos-26.05 1.9.7
- nixos-26.05-small 1.9.7
- nixpkgs-26.05-darwin 1.9.7

pkgs.nomad-pack

Nomad Pack is a templating and packaging tool used with HashiCorp Nomad

nixos-unstable 0.4.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2
nixos-26.05 0.4.2
- nixos-26.05-small 0.4.2
- nixpkgs-26.05-darwin 0.4.2

pkgs.nomad_1_10

Distributed, Highly Available, Datacenter-Aware Scheduler

nixos-unstable 1.10.5
- nixpkgs-unstable 1.10.5
- nixos-unstable-small 1.10.5
nixos-26.05 1.10.5
- nixos-26.05-small 1.10.5
- nixpkgs-26.05-darwin 1.10.5

pkgs.nomad_1_11

Distributed, Highly Available, Datacenter-Aware Scheduler

nixos-unstable 1.11.3
- nixpkgs-unstable 1.11.3
- nixos-unstable-small 1.11.3
nixos-26.05 1.11.3
- nixos-26.05-small 1.11.3
- nixpkgs-26.05-darwin 1.11.3

pkgs.nomad-autoscaler

Autoscaling daemon for Nomad

nixos-unstable 0.3.6
- nixpkgs-unstable 0.3.6
- nixos-unstable-small 0.3.6
nixos-26.05 0.3.6
- nixos-26.05-small 0.3.6
- nixpkgs-26.05-darwin 0.3.6

pkgs.nomad-driver-podman

Podman task driver for Nomad

nixos-unstable 0.6.4
- nixpkgs-unstable 0.6.4
- nixos-unstable-small 0.6.4
nixos-26.05 0.6.4
- nixos-26.05-small 0.6.4
- nixpkgs-26.05-darwin 0.6.4

pkgs.nomad-driver-containerd

Containerd task driver for Nomad

nixos-unstable 0.9.4
- nixpkgs-unstable 0.9.4
- nixos-unstable-small 0.9.4
nixos-26.05 0.9.4
- nixos-26.05-small 0.9.4
- nixpkgs-26.05-darwin 0.9.4

pkgs.terraform-providers.nomad

None

nixos-unstable 2.6.1
- nixpkgs-unstable 2.6.1
- nixos-unstable-small 2.6.1
nixos-26.05 2.6.1
- nixos-26.05-small 2.6.1
- nixpkgs-26.05-darwin 2.6.1

pkgs.python313Packages.nomadnet

Off-grid, resilient mesh communication

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.6
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

pkgs.python314Packages.nomadnet

Off-grid, resilient mesh communication

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.6
nixos-26.05 1.1.0
- nixos-26.05-small 1.1.0
- nixpkgs-26.05-darwin 1.1.0

pkgs.python313Packages.python-nomad

Python client library for Hashicorp Nomad

nixos-unstable 2.1.0
- nixpkgs-unstable 2.1.0
- nixos-unstable-small 2.1.0
nixos-26.05 2.1.0
- nixos-26.05-small 2.1.0
- nixpkgs-26.05-darwin 2.1.0

pkgs.python314Packages.python-nomad

Python client library for Hashicorp Nomad

nixos-unstable 2.1.0
- nixpkgs-unstable 2.1.0
- nixos-unstable-small 2.1.0
nixos-26.05 2.1.0
- nixos-26.05-small 2.1.0
- nixpkgs-26.05-darwin 2.1.0

pkgs.terraform-providers.hashicorp_nomad

None

nixos-unstable 2.6.1
- nixpkgs-unstable 2.6.1
- nixos-unstable-small 2.6.1
nixos-26.05 2.6.1
- nixos-26.05-small 2.6.1
- nixpkgs-26.05-darwin 2.6.1

Package maintainers

@rraval Ronuk Raval <ronuk.raval@gmail.com>
@techknowlogick techknowlogick <techknowlogick@gitea.com>
@rushmorem Rushmore Mushambi <rushmore@webenchanter.com>
@cottand Nico D'Cotta <nico@dcotta.com>
@cpcloud Phillip Cloud
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@drupol Pol Dellaiera <pol.dellaiera@protonmail.com>
@xbreak Calle Rosenquist <xbreak@alphaware.se>

Untriaged

Permalink CVE-2026-14373

7.7 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 6 days, 20 hours ago Activity log

Created suggestion 6 days, 20 hours ago

Nomad Docker driver Linux host namespace bypass

HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the Docker task driver's host namespace mode options. This may allow an authenticated job submitter to run a container in a host namespace and access information belonging to the host or to other workloads on the same client. This vulnerability, CVE-2026-14373, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.