Vulnerability in Hashicorp Nomad
CVE-2026-14891
HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to r…
CVSS v3 metric
CVSS v3 base score 8.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N.
Affected products
- Hashicorp Nomad — versions 0.4.1
- Hashicorp Nomad Enterprise — versions 0.4.1
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-14891?
- CVE-2026-14891 is a high-severity vulnerability in Hashicorp Nomad, classified under Improper Link Resolution Before File Access. CVSS score: 8.7/10. Published 2026-07-08.
- How severe is CVE-2026-14891?
- High severity. CVSS v3 base score is 8.7 out of 10.