VYPR

exec2 task driver

by Hashicorp

CVEs (1)

  • CVE-2026-8052MedMay 12, 2026
    risk 0.32cvss 6.0epss 0.00

    HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-8052) is fixed in version 0.1.2 of the exec2 task driver.