VULNERABILITY INTELLIGENCE

CVE-2024-1329

CVSS score7.7 HIGH
EPSS probability0.62%
CISA KEVNot currently listed
Published2024-02-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H

Description

HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14.

Weakness classification

  • security@hashicorp.com: CWE-59
  • nvd@nist.gov: CWE-610

Primary references