CVE-2026-14891CWE-59

Nomad vulnerable to sandbox escape in Docker task driver

High · published July 8, 2026

CVSS v3.1
8.7
EPSS
0%
Percentile
41.0
In the wild
Unconfirmed
What it is

HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to reading and writing files on the host. This vulnerability, CVE-2026-14891, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00487 · 41.0th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-07-08T20:09Z
EPSS history
Timeline
  • 08 JUL 20:09Z
    Nomad vulnerable to sandbox escape in Docker task driver
    cvelistv5