Advisoriesby IbisNomadGHSA-5mqx-rpxv-mvxj
HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration
Fix: upgrade to 1.8.2 or later
HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| github.com/hashicorp/nomad Go | < 1.8.2 | 1.8.2 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-610
- Also known as
- CVE-2024-6717, GO-2026-4278
- nvd.nist.gov/vuln/detail/CVE-2024-6717
- github.com/hashicorp/nomad/commit/ef6cdec8847e0698d386d1fd3761743df758ef99
- discuss.hashicorp.com/t/hcsec-2024-15-nomad-vulnerable-to-allocation-directory-path-escape-through-archive-unpacking/68781
- github.com/hashicorp/nomad
- github.com/hashicorp/nomad/releases/tag/v1.8.2
More Nomad advisories
All Nomad
Hashicorp Nomad Incorrect Privilege Assignment vulnerabilityCVE-2025-4922fixed in 1.10.2Nomad: secrets in logsCVE-2025-1296no fix yetHashicorp Nomad Incorrect Privilege Assignment vulnerabilityCVE-2024-12678fixed in 1.9.4Hashicorp Nomad Incorrect Authorization vulnerabilityCVE-2024-10975no fix yetNomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive UnpackingCVE-2024-7625fixed in 1.6.14 +2HashiCorp Nomad vulnerable to symlink attacksCVE-2024-1329fixed in 1.5.14 +2