CVE-2026-107347 - Nomad dispatch payload writes can escape the allocation directory through symlinks
CVE ID :CVE-2026-107347 Published : Oct. 29, 2026, 6:10 p.m. | 15 minutes ago Description :HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation...