https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:21:37.354312+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335163 EUVD-2026-335163 2026-10-04T18:21:37.356941+00:00 EUVD-2026-335163 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14891 fkie_cve-2026-14891 2026-10-04T18:21:37.356973+00:00

HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to reading and writing files on the host. This vulnerability, CVE-2026-14891, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.

 https://cve.radiocsirt.org/vuln/ghsa-5c56-jfhx-4gcm GHSA-5c56-jfhx-4gcm 2026-10-04T18:21:37.357004+00:00

HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to reading and writing files on the host. This vulnerability, CVE-2026-14891, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14891 UBUNTU-CVE-2026-14891 2026-10-04T18:21:37.357022+00:00

Affected: Ubuntu:18.04:LTS: nomad, Ubuntu:20.04:LTS: nomad

HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to reading and writing files on the host. This vulnerability, CVE-2026-14891, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.