Security Advisory

CVE-2026-7474

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-12 19:09:44

Last updated 2026-05-13 03:58:40

Assigner HashiCorp

CVSS score 8.8

State PUBLISHED

Description

HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path traversal attack. This vulnerability (CVE-2026-7474) is fixed in Nomad 2.0.1, 1.11.5 and 1.10.11.

← Browse all CVEs View on cve.org ↗