{"id":"EUVD-2026-29826","enisaUuid":"88f7b58c-b846-3185-93b1-e3ac74eb581b","description":"HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path traversal attack. This vulnerability (CVE-2026-7474) is fixed in Nomad 2.0.1, 1.11.5 and 1.10.11.","datePublished":"May 12, 2026, 7:09:44 PM","dateUpdated":"May 13, 2026, 3:58:40 AM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":"https://discuss.hashicorp.com/t/hcsec-2026-15-nomad-vulnerable-to-path-traversal-in-dynamic-host-volume-which-may-lead-to-code-execution/77417\n","aliases":"CVE-2026-7474\n","assigner":"HashiCorp","epss":8.16,"enisaIdProduct":[{"id":"acd8ed16-c97d-36cb-88a2-febc2b71709a","product":{"name":"Nomad","vendor":{"name":"Hashicorp"}},"product_version":"1.10.0 \u003c2.0.1"},{"id":"b0f6a8ee-1764-3399-a97a-2849a8b8a393","product":{"name":"Nomad Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.10.0 \u003c2.0.1"}],"enisaIdVendor":[{"id":"6a85fd6e-7cb0-3bd6-aa88-9a8600d66883","vendor":{"name":"Hashicorp"}}],"enisaIdVulnerability":[{"id":"59f9478b-3d2e-352f-9a69-24cf57a373e9","vulnerability":{"id":"CVE-2026-7474","description":"HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path traversal attack. This vulnerability (CVE-2026-7474) is fixed in Nomad 2.0.1, 1.11.5 and 1.10.11.","datePublished":"May 12, 2026, 7:09:44 PM","dateUpdated":"May 13, 2026, 3:58:40 AM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":"https://discuss.hashicorp.com/t/hcsec-2026-15-nomad-vulnerable-to-path-traversal-in-dynamic-host-volume-which-may-lead-to-code-execution/77417\n","enisa_id":"EUVD-2026-29826\n","assigner":"HashiCorp","epss":8.16,"dataProcessed":"Nov 5, 2026, 7:18:12 AM","vulnerabilityProduct":[{"id":"c1d44763-8f5f-36d7-8670-b42eb64bb866","product":{"name":"Nomad","vendor":{"name":"Hashicorp"}},"product_version":"1.10.0 \u003c2.0.1"},{"id":"e1f11a0c-3d4a-3cc4-adca-de1ffa7e3b31","product":{"name":"Nomad Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.10.0 \u003c2.0.1"}],"vulnerabilityVendor":[{"id":"d7fd4337-e516-3746-a01f-5f510a15f2fb","vendor":{"name":"Hashicorp"}}]}},{"id":"c355e645-3972-32bc-9947-36f210bc8f70","vulnerability":{"id":"GHSA-hx53-77qj-8663","description":"HashiCorp Nomad vulnerable to a path traversal","datePublished":"May 12, 2026, 9:31:35 PM","dateUpdated":"May 19, 2026, 3:39:28 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-7474\nhttps://github.com/hashicorp/nomad/commit/cd7240c4099ad33eda279924fb3a9459b162d120\nhttps://discuss.hashicorp.com/t/hcsec-2026-15-nomad-vulnerable-to-path-traversal-in-dynamic-host-volume-which-may-lead-to-code-execution/77417\nhttps://github.com/hashicorp/nomad\nhttps://github.com/hashicorp/nomad/releases/tag/v2.0.1\n","enisa_id":"EUVD-2026-29826\n","aliases":"CVE-2026-7474\nGHSA-hx53-77qj-8663\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}