{"id":"GO-2026-5718","revision":"8f8b53cbfb344d3d8d704140bdf225cf","records":[{"revision":"8f8b53cbfb344d3d8d704140bdf225cf","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5718","aliases":["CVE-2026-8052","GHSA-wqwc-x3rc-2xw6"],"title":"HashiCorp Nomad’s exec2 task driver vulnerable to a symlink attack in github.com/hashicorp/nomad-driver-exec2","description":"HashiCorp Nomad’s exec2 task driver vulnerable to a symlink attack in github.com/hashicorp/nomad-driver-exec2","state":0,"publishedAt":"2026-06-25T22:34:38+00:00","modifiedAt":"2026-06-25T23:01:29.2337171+00:00","affected":[{"ecosystem":"Go","name":"github.com/hashicorp/nomad-driver-exec2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.1.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-wqwc-x3rc-2xw6","https://nvd.nist.gov/vuln/detail/CVE-2026-8052","https://discuss.hashicorp.com/t/hcsec-2026-13-nomads-exec2-task-driver-vulnerable-to-arbitrary-file-read-write-on-client-host-through-symlink-attack/77415","https://github.com/hashicorp/nomad-driver-exec2/releases/tag/v0.1.2"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5718","license":"OSV · upstream source license applies","key":"osv:GO-2026-5718","identifiers":["GO-2026-5718","CVE-2026-8052","GHSA-wqwc-x3rc-2xw6"]},"retained":false,"historicalAffected":[]}],"coverage":[]}